news.so

Issued by R3

About this certificate

This digital certificate with serial number 04:af:07:93:61:8a:95:2b:58:e7:64:c0:b6:fe:01:dd:73:57 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=news.so

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:07:93:61:8a:95:2b:58:e7:64:c0:b6:fe:01:dd:73:57
Serial Number (int): 408008627780187300374648716875516463641431
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:66:4e:dd:25:32:bc:66:a7:89:f9:09:fa:6a:e0:f9:a3:4a:3d:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:ed:5b:99:23:c0:9f:61:44:30:fa:39:88:c5:09:c3:af:55:2a:b0
Fingerprint (sha256): 86:18:ae:cf:3b:1f:ea:d9:b5:ae:d5:44:f3:44:ce:6a:b5:fe:d2:59:c8:f6:5a:be:28:84:d6:4d:8f:71:dd:07

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate news.so

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.so

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2112ky.one
*.31sheds.com
*.alaskaneedsaraise.org
*.atirador.online
*.bikeloan.com.au
*.capitalmetro.org
*.cedarscabins.com
*.cgvindo.pro
*.coastalexterminating.com
*.dichvulmd.net
*.dnemark.eu
*.eliq.pl
*.evian.online
*.farangfriendly.com
*.firstcupcafetx.com
*.flixtortv.io
*.frigginvestment.xyz
*.garagedoorsnewhaven.com
*.gunnisonconsulting.biz
*.international-orange.org
*.ispdc.org
*.kenbraiding.com
*.kingschat.at
*.life-hacking.net
*.luckiness.info
*.microplane.uk
*.mountainrockwhey.com
*.news.so
*.piperanselmi.com
*.ppp-loan.site
*.pragatipackersandmovers.co
*.renote.co
*.rusanesth.com
*.salamdl.co
*.shirturl.at
*.spiritlakecasino.net
*.supremelandscaping.co.uk
*.sushi.de
*.tannermans.com
*.teenboysex.tv
*.tennysonpoint.au
*.thefmzm.xyz
*.thegreatrace.media
*.tullahomanews.co
*.watchmovies.sx
*.ynynsp.com
*.youngsextube.me
*.zerodisplacementsurfacademy.com
*.zhiboya.cc
*.znye.com
2112ky.one
31sheds.com
alaskaneedsaraise.org
atirador.online
bikeloan.com.au
capitalmetro.org
cedarscabins.com
cgvindo.pro
coastalexterminating.com
dichvulmd.net
dnemark.eu
eliq.pl
evian.online
farangfriendly.com
firstcupcafetx.com
flixtortv.io
frigginvestment.xyz
garagedoorsnewhaven.com
gunnisonconsulting.biz
international-orange.org
ispdc.org
kenbraiding.com
kingschat.at
life-hacking.net
luckiness.info
microplane.uk
mountainrockwhey.com
news.so
piperanselmi.com
ppp-loan.site
pragatipackersandmovers.co
renote.co
rusanesth.com
salamdl.co
shirturl.at
spiritlakecasino.net
supremelandscaping.co.uk
sushi.de
tannermans.com
teenboysex.tv
tennysonpoint.au
thefmzm.xyz
thegreatrace.media
tullahomanews.co
watchmovies.sx
ynynsp.com
youngsextube.me
zerodisplacementsurfacademy.com
zhiboya.cc
znye.com

Other certificates including the domain name news.so

(limited to 100 certificates)
belinvestbank.com
news.so
news.so
news.so
news.so
belinvestbank.com
news.so
belinvestbank.com

Certificate

The complete raw certificate details for news.so in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408008627780187300374648716875516463641431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 17:40:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 17:40:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.so'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741148504226054057898842260365278090070883117558968663047033361676201512869149114797466471526901933819365460546655606619626824945180466462596271150027063762950295859834707528258733395082355245134227356559734724218464041903624691209843944889105996802026907460259366720471260481226136933831680912827791022791876952518239703510521368751842133749269278601126731099102187176905716101596475637737375445688309280733642860350293304202761799576330281627060625959271764364123574579549417585906872844943724965170460877729569355857213874125816981670634601332794900581562262458197982302185009990703125359161850688605814378626128937227289899065557242867551029704115927630796706804685040342693564020852298577739335807186046687017587841437681946728311062939207406573622473033872933157503850934250974481493231946401142204715358230797169322380000906184381786370898512834055834627270882362103754993036553521119564303805748941096013783822426196784703930913988608512956866158557208452527660742161699888414406618782244799555363741547222656057439097901030622558703784625713839214301170032731452677789715386402959092492765071106955466442489813611710729361436495812756300861676679150837406366927121259035013893087262616178311274877789152606350767907750348483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff664edd2532bc66a789f909fa6ae0f9a34a3d1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1802 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2112ky.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.31sheds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alaskaneedsaraise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atirador.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikeloan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalmetro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cedarscabins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cgvindo.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coastalexterminating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dichvulmd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnemark.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eliq.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evian.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farangfriendly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstcupcafetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flixtortv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frigginvestment.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garagedoorsnewhaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gunnisonconsulting.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.international-orange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ispdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kenbraiding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingschat.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.life-hacking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luckiness.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microplane.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountainrockwhey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piperanselmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppp-loan.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pragatipackersandmovers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renote.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rusanesth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salamdl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirturl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiritlakecasino.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supremelandscaping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sushi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tannermans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teenboysex.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tennysonpoint.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefmzm.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegreatrace.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tullahomanews.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchmovies.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ynynsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youngsextube.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zerodisplacementsurfacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhiboya.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.znye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2112ky.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '31sheds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskaneedsaraise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atirador.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikeloan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalmetro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cedarscabins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgvindo.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastalexterminating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dichvulmd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnemark.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliq.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evian.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farangfriendly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstcupcafetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flixtortv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frigginvestment.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garagedoorsnewhaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunnisonconsulting.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international-orange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ispdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenbraiding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingschat.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-hacking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckiness.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microplane.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainrockwhey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piperanselmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppp-loan.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pragatipackersandmovers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renote.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusanesth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salamdl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirturl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritlakecasino.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supremelandscaping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tannermans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenboysex.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennysonpoint.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefmzm.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegreatrace.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tullahomanews.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchmovies.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ynynsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngsextube.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zerodisplacementsurfacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhiboya.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'znye.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e059de1ab00000403004730450220107a50440449870e92ba04f69d5435c3ab9c474e62f5c8d9de332d17f0b1ca4f022100f434514f8be9b2b04c10e61dccbdbcbe620af067195c81164b6fc6c536fa60d0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e059de1f100000403004730450220607b8550b34178933137ce803f7838ea44a2344579804e1533cdef75901cc0b302210089706d77e88353e447d371edc47cf82fdcf7b483eab7edfc50a8075e69dbdd18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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