angkorwonder.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6b:dd:44:1f:1b:51:6b:7e:dd:81:8e:07:70:18:17:f0:0a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=angkorwonder.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6b:dd:44:1f:1b:51:6b:7e:dd:81:8e:07:70:18:17:f0:0a
Serial Number (int): 385153470081755305294316553101801783029770
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fd:72:6b:67:18:04:cf:da:07:91:f1:c3:1b:9c:cf:ea:ee:41:16:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:16:b2:2a:c1:7f:71:b9:04:6d:d3:14:4b:05:50:bb:17:e3:ba:59
Fingerprint (sha256): 81:5d:20:5c:bb:20:de:bf:7c:0c:00:71:02:d1:49:f3:76:20:8d:2c:bf:87:c5:5f:f9:6c:62:ac:6d:1c:29:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate angkorwonder.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for angkorwonder.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.52weav.com
*.abdibudimulia.com
*.al-mahditv.com
*.alleyinvesting.com
*.amyyy.com
*.angkorwonder.com
*.arieldreams.com
*.atelier-artimage.com
*.auteldrones.xyz
*.bunnylust.co
*.commercialplumbingrepair.com
*.douhaose.com
*.e-r-n.co
*.emrullahkocabas.com
*.forcus.co
*.giaodiemtinmung.net
*.glcok.com
*.grace-international.co
*.hdup2.xyz
*.industrystandardbar.com
*.jeux2societe.net
*.joycreator.cc
*.justthegys.com
*.la-tienda.co
*.linkacze.pl
*.metabittoken.com
*.momondo.site
*.moonotel.com
*.novinhabhcetuda.com
*.pakistanadventure2022.com
*.pdlswap.com
*.prosperasantander.co
*.purebondinvestments.com
*.qasmay.com
*.renewhouse.net
*.royalcoinchase.com
*.sbcollege.co
*.sell-bua.com
*.simidude.com
*.slimspots.xyz
*.smmxyservice.xyz
*.snickerdoodle.xyz
*.subccene.com
*.tabooflashgames-67621.online
*.thebossbabyevent.com
*.tiedyesweatshirt.com
*.trustmedrx.com
*.velvettheshow.com
*.visitevirtuelle-maisonousmanesow.com
*.xsm16.com
52weav.com
abdibudimulia.com
al-mahditv.com
alleyinvesting.com
amyyy.com
angkorwonder.com
arieldreams.com
atelier-artimage.com
auteldrones.xyz
bunnylust.co
commercialplumbingrepair.com
douhaose.com
e-r-n.co
emrullahkocabas.com
forcus.co
giaodiemtinmung.net
glcok.com
grace-international.co
hdup2.xyz
industrystandardbar.com
jeux2societe.net
joycreator.cc
justthegys.com
la-tienda.co
linkacze.pl
metabittoken.com
momondo.site
moonotel.com
novinhabhcetuda.com
pakistanadventure2022.com
pdlswap.com
prosperasantander.co
purebondinvestments.com
qasmay.com
renewhouse.net
royalcoinchase.com
sbcollege.co
sell-bua.com
simidude.com
slimspots.xyz
smmxyservice.xyz
snickerdoodle.xyz
subccene.com
tabooflashgames-67621.online
thebossbabyevent.com
tiedyesweatshirt.com
trustmedrx.com
velvettheshow.com
visitevirtuelle-maisonousmanesow.com
xsm16.com

Other certificates including the domain name angkorwonder.com

(limited to 100 certificates)
cancambodia.info
angkorwonder.com
cambodiavipassanacenter.com
vimuttimagga.info
angkorwonder.com
cambodiabuddhism.info
angkorwonder.com
cancambodia.info
angkorwonder.com
sophanseng.info
angkorwonder.com
kampucheakrom.ca
angkorwonder.vimuttimagga.info
www.cambodianview.ghosananda.org
inforeactive.com
inforeactive.com
khmeroversea.info
angkorwonder.com

Certificate

The complete raw certificate details for angkorwonder.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385153470081755305294316553101801783029770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 21:59:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 21:59:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'angkorwonder.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892476098998038728316926928622333274901119666801646395949297109855770177052082362652531427013749471690559798174429182222908300305480330250648410802393878606999827430474790350060723564061059362373635020715605727232329973815221202882008614723941009016993446891209329870531122988894509830789234722053146737490004944878996104582834082105844961064000937664960727283686964147754730391650739019124821371919935912257414809255812929680725102019596189676849709069781102423372127428241957110753620851383155011360866702246764964208919984226317111629360989269112803606817185058956018624856806242913657744390498980935112840523471057112294927600778222959303673919069788786363500995639510293899248637925990448496359650816572578360414625375676900668809378274289154148361494248129597011834913649136557139383681969390975510717665186239644095921318281501188717379765434435424977203981341855564848445085105057666556671197612028322231920779516679656547248342015484974570017692528247963459692746437251539519792939836154250059433127620469062868049662587308944846241152783707455940894365568845904105918651362978580387944169235377246450716078369389254150785660958384129423038327319380867605026016877775627679305990739409622762448847485075692820282974811239093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd726b671804cfda0791f1c31b9ccfeaee4116a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1880 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.52weav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abdibudimulia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.al-mahditv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alleyinvesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amyyy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arieldreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atelier-artimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auteldrones.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bunnylust.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commercialplumbingrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.douhaose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-r-n.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emrullahkocabas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forcus.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giaodiemtinmung.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glcok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grace-international.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdup2.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.industrystandardbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeux2societe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joycreator.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justthegys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.la-tienda.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linkacze.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metabittoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.momondo.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moonotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novinhabhcetuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakistanadventure2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdlswap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prosperasantander.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purebondinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qasmay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renewhouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcoinchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbcollege.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sell-bua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simidude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slimspots.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smmxyservice.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snickerdoodle.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.subccene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tabooflashgames-67621.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebossbabyevent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiedyesweatshirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustmedrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.velvettheshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitevirtuelle-maisonousmanesow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xsm16.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '52weav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abdibudimulia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'al-mahditv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alleyinvesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amyyy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arieldreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelier-artimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auteldrones.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunnylust.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialplumbingrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'douhaose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-r-n.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emrullahkocabas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forcus.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giaodiemtinmung.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glcok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grace-international.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdup2.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrystandardbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeux2societe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joycreator.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justthegys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-tienda.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkacze.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabittoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momondo.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novinhabhcetuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakistanadventure2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdlswap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prosperasantander.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purebondinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qasmay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewhouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcoinchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbcollege.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sell-bua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simidude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slimspots.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smmxyservice.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickerdoodle.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subccene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabooflashgames-67621.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebossbabyevent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiedyesweatshirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustmedrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velvettheshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitevirtuelle-maisonousmanesow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsm16.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e204b4a670000040300483046022100a8cff0da6c78001c290bad3e4ba82a69a7155d0f2cd10ff6a9b29a562eee9996022100ed498fcef18086175992d6a4fac33f91c44ef93c816b47326e8debc02abe27ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e204b4a6a0000040300473045022078c78670395a38868844dc2cfb4511f8a76b930ae3017122df1761bf79836f8f022100e9884acff2f2508d769be4f86dc6882c52153374f9675b54888742d868eca9ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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