digitalkraft.io

Issued by R3

About this certificate

This digital certificate with serial number 04:ad:c1:8c:56:bc:79:df:07:6a:7b:9e:31:f3:5e:82:9f:3d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=digitalkraft.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ad:c1:8c:56:bc:79:df:07:6a:7b:9e:31:f3:5e:82:9f:3d
Serial Number (int): 407575262888329862183390170734553324494653
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 36:13:04:c1:dd:2e:c6:f4:a6:1b:07:84:31:18:cd:44:9d:c6:54:35
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7e:fc:61:4b:d8:ec:2d:bf:f2:6b:49:db:cf:38:73:9b:2d:b7:a7:7c
Fingerprint (sha256): 85:96:c8:14:bd:af:3c:91:71:a1:7f:19:63:0e:ab:4b:ac:18:cd:6b:e8:87:a8:92:3a:8b:cf:22:86:98:63:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate digitalkraft.io

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digitalkraft.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1800bumper.au
*.189.au
*.5meipai.info
*.absolutereturn-alpha.com
*.acling.info
*.agarp.us
*.algodock.com
*.algolawyer.com
*.allianceunited4you.info
*.armur.pro
*.automio.co
*.bateo.me
*.bestbedtimestories.com
*.beverlymcclellan.com
*.blackbaud.au
*.clubvulkanplatinum.com
*.commodore-pet.com
*.corkmat.biz
*.digitalkraft.io
*.dreamdom.info
*.dreamglass.pro
*.eat.au
*.envatomining.com
*.evid.au
*.faithag.me
*.gsfbroker.pro
*.guj.au
*.ivi.au
*.iyvle.com
*.makeupadviser.info
*.manzana.pro
*.oneplus.au
*.onlineamong.us
*.quickshine.info
*.ramp.au
*.rhode.au
*.rid.au
*.showdown.pro
*.showmatch.pro
*.sibelius.pro
*.skymovieshd.autos
*.stroycrimea.pro
*.thaichicago.net
*.travelocity.au
*.vil.au
*.visitorfeedback2020.com
*.viw.au
*.workfront.au
*.xn--mgbls7e.com
*.xn--ngbdq8ft7a.com
1800bumper.au
189.au
5meipai.info
absolutereturn-alpha.com
acling.info
agarp.us
algodock.com
algolawyer.com
allianceunited4you.info
armur.pro
automio.co
bateo.me
bestbedtimestories.com
beverlymcclellan.com
blackbaud.au
clubvulkanplatinum.com
commodore-pet.com
corkmat.biz
digitalkraft.io
dreamdom.info
dreamglass.pro
eat.au
envatomining.com
evid.au
faithag.me
gsfbroker.pro
guj.au
ivi.au
iyvle.com
makeupadviser.info
manzana.pro
oneplus.au
onlineamong.us
quickshine.info
ramp.au
rhode.au
rid.au
showdown.pro
showmatch.pro
sibelius.pro
skymovieshd.autos
stroycrimea.pro
thaichicago.net
travelocity.au
vil.au
visitorfeedback2020.com
viw.au
workfront.au
xn--mgbls7e.com
xn--ngbdq8ft7a.com

Other certificates including the domain name digitalkraft.io

(limited to 100 certificates)
digitalkraft.io
digitalkraft.io

Certificate

The complete raw certificate details for digitalkraft.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407575262888329862183390170734553324494653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 13:34:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-25 13:34:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digitalkraft.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690683847075652681614225159523924516952410505560899198740552185565669778999616698686193933359659297298208661596253786464965266946467248414102006801848784536948181858141794179438150155361212325677284012965402925708673997658220298382926368446238276084054828213770199706115177739802172246846504582102625633274675071184439573930633387974221119904119478519902488725114100728366875494121441561500129279932109063923666220882898908652262772001685465266286864625497797984069441478086682953867502942712282171624346050471327511671745803947469632187484150165267699791294888065201493426609162323389540592179134039689145868378398912129145631644194001098427071510752595262828013691663154876655467436095576382010514834451175254847690021151006452350543990577375971660536962508301262840087728789756289928544727663077460724465767337672484306248961617041616506851396313795402314779577389213058290254802953483221099742331311104061285480574302990193994355799678392915316537870043869528992337961798884208419147219424218016707290170325852745011684977344930301945126575799736796506897148151047103030406832206347463659988648888626336048565911582745148500307768811899700298355168768879097237436345377057591487236955700459057548748002238951972628182509521794467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							361304c1dd2ec6f4a61b07843118cd449dc65435
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1576 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1800bumper.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.189.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5meipai.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.absolutereturn-alpha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acling.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agarp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.algodock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.algolawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allianceunited4you.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armur.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.automio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bateo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestbedtimestories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beverlymcclellan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackbaud.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubvulkanplatinum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commodore-pet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corkmat.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalkraft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreamdom.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreamglass.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eat.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.envatomining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evid.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faithag.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsfbroker.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guj.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivi.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iyvle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makeupadviser.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manzana.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneplus.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlineamong.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quickshine.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ramp.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhode.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rid.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.showdown.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.showmatch.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sibelius.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skymovieshd.autos'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stroycrimea.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thaichicago.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelocity.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vil.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitorfeedback2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viw.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workfront.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mgbls7e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ngbdq8ft7a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1800bumper.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '189.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5meipai.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absolutereturn-alpha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acling.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agarp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algodock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algolawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianceunited4you.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armur.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bateo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestbedtimestories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beverlymcclellan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackbaud.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubvulkanplatinum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodore-pet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corkmat.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalkraft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamdom.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamglass.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eat.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envatomining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evid.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithag.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsfbroker.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guj.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivi.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iyvle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeupadviser.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manzana.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneplus.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineamong.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickshine.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramp.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhode.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rid.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showdown.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showmatch.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sibelius.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skymovieshd.autos'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stroycrimea.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaichicago.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelocity.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vil.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitorfeedback2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viw.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workfront.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mgbls7e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ngbdq8ft7a.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fba79d47300000403004630440220514d237d1f0024ac37f7321f78f99330377650e56f44e17a155c3e5a024ff25702202e780e52ae4666947b857842dd077a031f0a4b2f1ff82ee90528bcda9a8df10200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fba79d4970000040300483046022100a3ab27214a8076a1ebe2e1f1ffc6c026028a55cf68179e64eceab75685e54a34022100bac3779bf166bc6060ac854708baa1ceca7cf2a03eb43f9dd58f7f40e46639eb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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