jeffzima.com

Issued by R3

About this certificate

This digital certificate with serial number 04:2a:6b:0e:79:bc:0b:f0:09:3a:4d:b4:0d:7a:93:f7:0d:61 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jeffzima.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2a:6b:0e:79:bc:0b:f0:09:3a:4d:b4:0d:7a:93:f7:0d:61
Serial Number (int): 362883305694495558653360205993783898606945
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:e1:dd:12:cc:77:00:e8:44:20:8b:39:31:5b:f2:b3:de:53:f8:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:91:cd:5d:3e:ef:49:2c:54:68:ad:0e:25:d5:54:82:39:67:2b:d0
Fingerprint (sha256): 87:a7:e6:f5:da:74:62:cd:8f:12:26:dc:5f:16:5f:aa:33:27:ff:18:41:25:d3:82:85:10:57:77:8e:93:ec:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jeffzima.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jeffzima.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alltownelectricinc.com
*.alterno2.com
*.atsuko-design.com
*.bandsanddjs.com
*.bexuniversal.com
*.bieed.com
*.blazeluxshop.com
*.bluelettebible.com
*.bmclipping.com
*.clairbief.com
*.cliente-atualize.com
*.deepstandard.net
*.dyingexpress.com
*.edhnvuoi.com
*.englandvsusalive.com
*.englishbullpup.com
*.fiwinpw.com
*.fortuneclock22.com
*.globboshop.com
*.goodoral.co
*.itcadv.com
*.jeevansathee.com
*.jeffzima.com
*.kickitout.net
*.larkindawson.com
*.les3peches.com
*.lineage2expose.com
*.manavgatyanki.com
*.massalit.com
*.masterbatches.co
*.mendibilejauregia.com
*.mlyfans.com
*.mqsql.com
*.mravel.com
*.nintos.com
*.psdfreebee.com
*.raooffardan.com
*.recordguinness.com
*.semaur.com
*.shoeaholicthailand.com
*.shoptheosoho.com
*.soikeoso1.com
*.solvetta.com
*.strapongallery.com
*.thehustleinsight.com
*.theplaygroundga.com
*.wakico.com
*.whois-tools.com
*.woterry.com
*.zkmkm.org
alltownelectricinc.com
alterno2.com
atsuko-design.com
bandsanddjs.com
bexuniversal.com
bieed.com
blazeluxshop.com
bluelettebible.com
bmclipping.com
clairbief.com
cliente-atualize.com
deepstandard.net
dyingexpress.com
edhnvuoi.com
englandvsusalive.com
englishbullpup.com
fiwinpw.com
fortuneclock22.com
globboshop.com
goodoral.co
itcadv.com
jeevansathee.com
jeffzima.com
kickitout.net
larkindawson.com
les3peches.com
lineage2expose.com
manavgatyanki.com
massalit.com
masterbatches.co
mendibilejauregia.com
mlyfans.com
mqsql.com
mravel.com
nintos.com
psdfreebee.com
raooffardan.com
recordguinness.com
semaur.com
shoeaholicthailand.com
shoptheosoho.com
soikeoso1.com
solvetta.com
strapongallery.com
thehustleinsight.com
theplaygroundga.com
wakico.com
whois-tools.com
woterry.com
zkmkm.org

Other certificates including the domain name jeffzima.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for jeffzima.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362883305694495558653360205993783898606945
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 19:54:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 19:54:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jeffzima.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665943444804180338901123620577530856210497862607041417821306927539469106946343027800892561057449944911309245803847287471148095915277515102424100306762951971387300814925078785255565395516728484625472329149143649591154760690392507688375755220830431843099755003794150400558811326194005062467164918846451919642665947941347647923373874940963667823830198239026820709975733377427717478185203163411310070280093512496790411661903786321582444832229472686505720793122654992588185131429852814904649415061889661564301104554129485381497042077475974520534311943272529308976240438938823863356702436766258650695886929903684576116270771104717749617180860523468182416492426192952048705955098567807464059273658471960538500010912244745493951793754504611306129551969277824358039405007783574012478359774646719983298490040973682626066539920124186350240409279489171163905086739365383404720921400429496265293385479212055673228076821468488937374955202628359586227922421056023840160430368346854363674635992750237735077242694416607198548423222697833503778993272781631784699037285706115894804707613860829148123003799833954801881879155194563289634686752365044865538755244588270930742452486189392413815718283296947378733603192260747665603457419140844496129510290081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24e1dd12cc7700e844208b39315bf2b3de53f875
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1774 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alltownelectricinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alterno2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atsuko-design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bandsanddjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bexuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bieed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blazeluxshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluelettebible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmclipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clairbief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cliente-atualize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepstandard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dyingexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edhnvuoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.englandvsusalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.englishbullpup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiwinpw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortuneclock22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globboshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodoral.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itcadv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeevansathee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeffzima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kickitout.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larkindawson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.les3peches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lineage2expose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manavgatyanki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.massalit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masterbatches.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mendibilejauregia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlyfans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mqsql.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nintos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psdfreebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raooffardan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recordguinness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.semaur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoeaholicthailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoptheosoho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soikeoso1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solvetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strapongallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehustleinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theplaygroundga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wakico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whois-tools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woterry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zkmkm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alltownelectricinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alterno2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atsuko-design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandsanddjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bexuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bieed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blazeluxshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluelettebible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmclipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clairbief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliente-atualize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepstandard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyingexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edhnvuoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englandvsusalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishbullpup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiwinpw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortuneclock22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globboshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodoral.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcadv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeevansathee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffzima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickitout.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larkindawson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les3peches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lineage2expose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manavgatyanki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massalit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterbatches.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendibilejauregia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlyfans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqsql.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nintos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psdfreebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raooffardan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordguinness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semaur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoeaholicthailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoptheosoho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soikeoso1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solvetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strapongallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehustleinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theplaygroundga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whois-tools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woterry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zkmkm.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ace1f8c6f0000040300483046022100dc0518fecf357fc1f63daa64d005cbca0d3e84a140503d833f19d17d935d06bc0221009ae2cb3884cae107b16d886a2673052cf3d3f200a8dce6e91afe984dc19872c2007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ace1f8c9b0000040300473045022100c2c7d2c1e2d88288c270a186b105c226b04eb726e5d5f0da0f2ccb81341d89e202207edb827b6be442812404403840ff6ead3607bc2ad732387ed44b1d3e707f6265
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000d9253cf5231a1da5220a4b8f14759224f521fa80dddd07e1b1749b21c0bd0da0090c8c61f23045a36cb12a9c9ae03eb7fbc53b5078bbb405420319b1b20ea6211412443415b8dbc657e9277b27fac646e37451e885d247fa26380b85a9585ded012647077419e9e87095eac2b625ebe7d13c98a5ac8626c6c32e2f8d9d7f9959cc1ee9a13464f814a6af84e2306435fdb40fab57e2426cca0423bf343a0018c2af3cada31f29e06ab19ecb653dab9f53163527e47c2a62e9b065f0d6ab81cdaa37c31c5a9e72b5059b7adb62484662d2b4d6a8e4e0ccd476751a9f42de430cae518dae519a2381d921b05b88cee0b747696daa958b76ae74a9bb04468ef2857