ciganas.net

Issued by R3

About this certificate

This digital certificate with serial number 03:60:79:d3:38:01:61:d6:8c:df:0c:58:03:f1:fa:89:7b:fe was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ciganas.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:79:d3:38:01:61:d6:8c:df:0c:58:03:f1:fa:89:7b:fe
Serial Number (int): 294165898317742403489938338486468219599870
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:4e:e4:42:f5:49:a8:32:f0:25:8f:32:97:84:e2:11:7e:e2:c4:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 73:a5:04:81:fd:13:dc:ef:71:7c:7d:67:e8:f6:17:50:90:c8:fd:3f
Fingerprint (sha256): 84:b6:ff:40:0d:c7:73:b5:69:72:a4:17:4a:81:b5:da:cb:0b:21:7e:7f:04:2e:3e:3f:05:5b:c4:31:91:c5:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ciganas.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ciganas.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aaronfrondorf.com
*.airvarvapr.com
*.argentina24-7.com
*.argos-sainsbury.com
*.arpitarunkumaar.me
*.asmoothmove.co.uk
*.beardazzle.com
*.boodisoaps.com
*.boshustles.com
*.brcommunityfridge.com
*.byymd1xkx28ph9jkpcgnyrl.com
*.cabanontransport.com
*.cacaouetteagipi.com
*.cascadeluxeryvinyl.com
*.catsoverhumans.com
*.ciganas.net
*.co-jams.com
*.commongroundstudy.space
*.daskrap.com
*.fjdsck.com
*.fructisblond.com
*.ifyouseemehappypleaseleavemealone.com
*.independentresearchplatform.org
*.kingsofcomedymovie.com
*.lbszh.com
*.liberdrac.com
*.mothersafe.org
*.msnf.org
*.negiotonline.com
*.nrlewdbh.com
*.ofgag.com
*.ogix.com
*.onemeralcosports.com
*.paperllessemployee.com
*.pophax.com
*.primawellnesspattaya.com
*.primumagency.com
*.prockcimo.com
*.redx3.com
*.referencedigi.com
*.senserely.com
*.skyscener.net
*.stagtoolhire.co.uk
*.su-score.com
*.the-wine-key.com
*.tokushima-jazz.com
*.utahdinersguide.com
*.votefame.com
*.wtadanceacademy.co.uk
*.yasongtube.net
aaronfrondorf.com
airvarvapr.com
argentina24-7.com
argos-sainsbury.com
arpitarunkumaar.me
asmoothmove.co.uk
beardazzle.com
boodisoaps.com
boshustles.com
brcommunityfridge.com
byymd1xkx28ph9jkpcgnyrl.com
cabanontransport.com
cacaouetteagipi.com
cascadeluxeryvinyl.com
catsoverhumans.com
ciganas.net
co-jams.com
commongroundstudy.space
daskrap.com
fjdsck.com
fructisblond.com
ifyouseemehappypleaseleavemealone.com
independentresearchplatform.org
kingsofcomedymovie.com
lbszh.com
liberdrac.com
mothersafe.org
msnf.org
negiotonline.com
nrlewdbh.com
ofgag.com
ogix.com
onemeralcosports.com
paperllessemployee.com
pophax.com
primawellnesspattaya.com
primumagency.com
prockcimo.com
redx3.com
referencedigi.com
senserely.com
skyscener.net
stagtoolhire.co.uk
su-score.com
the-wine-key.com
tokushima-jazz.com
utahdinersguide.com
votefame.com
wtadanceacademy.co.uk
yasongtube.net

Other certificates including the domain name ciganas.net

(limited to 100 certificates)
ciganas.net
ciganas.net
promoset.online

Certificate

The complete raw certificate details for ciganas.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294165898317742403489938338486468219599870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 17:56:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 17:56:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ciganas.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800124294850232343448432468920480343790182219176913246752992799678506804520274881009493886705727134222739480992687877045037285262694300680316801964183310271703057973276133866375152130541867858394830938109262807716625515581370409837742997991793054602575897806751629873859664657582652527122081612894208593815097429404178581601358073732033864079030504977219346831236466990182727864694901124468801714356369570090986591914825736961697970265216817638933935825252812771122555563712505273686633571158004909971576882273275738581919916069487260639952109559452484008972219245011457427935393055599597872649421768156095711040470318357394274336943400488469447003057570831427346802667381551509907538527130268877548100932944288898215802002931313651057022553476288730697516787259044841497114807129082170144355662254538451262082562294769761904911234048577837487299001609690315205831589854986457969519808180120413216802056630023659428075285622076845530861565074219973259416141270477526248711787359775950728814616612260776750060413639812354086904197285106721986119507651019485681712391108384720816357918985346138267812668406491885239518850925866636260663331600172774718828271883055255734358048064905249561242534182673224427598372078479866769032516427203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							854ee442f549a832f0258f329784e2117ee2c4c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1942 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaronfrondorf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airvarvapr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argentina24-7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argos-sainsbury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arpitarunkumaar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asmoothmove.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beardazzle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boodisoaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boshustles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brcommunityfridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byymd1xkx28ph9jkpcgnyrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabanontransport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cacaouetteagipi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cascadeluxeryvinyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catsoverhumans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciganas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.co-jams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commongroundstudy.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daskrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fjdsck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fructisblond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifyouseemehappypleaseleavemealone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independentresearchplatform.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingsofcomedymovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lbszh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liberdrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mothersafe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msnf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negiotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrlewdbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ofgag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ogix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onemeralcosports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paperllessemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pophax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primawellnesspattaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primumagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prockcimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redx3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.referencedigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senserely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skyscener.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagtoolhire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.su-score.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-wine-key.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tokushima-jazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utahdinersguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.votefame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wtadanceacademy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yasongtube.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaronfrondorf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airvarvapr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argentina24-7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argos-sainsbury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arpitarunkumaar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmoothmove.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardazzle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boodisoaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boshustles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brcommunityfridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byymd1xkx28ph9jkpcgnyrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabanontransport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cacaouetteagipi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cascadeluxeryvinyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catsoverhumans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciganas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co-jams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commongroundstudy.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daskrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fjdsck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fructisblond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifyouseemehappypleaseleavemealone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independentresearchplatform.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsofcomedymovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbszh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberdrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mothersafe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negiotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrlewdbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofgag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onemeralcosports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paperllessemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primawellnesspattaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primumagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prockcimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redx3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referencedigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senserely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyscener.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagtoolhire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'su-score.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-wine-key.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokushima-jazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahdinersguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votefame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtadanceacademy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yasongtube.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d5694e49700000403004830460221009371d8ead5e769927a81465ad27e965cda11ae8bd0a1ebb018d5de3126941b12022100fcbab90d3fd1a403cf7021c88afce850284025fc97eb46e16103e0f32372c9f90077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d5694e4a00000040300483046022100fb21f988dca0e6781d7b00d6f44ddc2343191e0bd4f738ab742892d5088bbcdf022100aecb0742c0c926867b2199b982a550fdbf7427c7999f2dd04fff63fda55df471
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0030579ef6885a4fbece35a972f35c1b9d02bb0a6e0160a43b29880a972c3e15e6b2c551af643021ec47da84accc147922137df4568793b5c4474e677357b30248ec65272d72955810ce82485f5d975c5609b665095e490bea55931daed0fac825049753491ddd1232b556d5908e300bb6f15e7e006600fb4c702c909e4576eeb99f94003c8dd52f2fa4f14e3fc789a9e6fbdd559b26d519d511a1d382bc72060ae65abc0404cf49d3d104dec2953cfc9c83431a25add56e4b108e549d513ce7de83f640eaa2be9aa55d410b554199eb21ef24c0c0534008bb362c6ed72ef4f66940fc6c494a5d2a3fedab55df7a1519296a27669ffcc50468c3a18bd1f1ebf695