nakrawedzi.org

Issued by R3

About this certificate

This digital certificate with serial number 04:94:ba:29:a6:b6:2d:8e:26:9a:41:1f:c8:56:90:55:19:39 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nakrawedzi.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:94:ba:29:a6:b6:2d:8e:26:9a:41:1f:c8:56:90:55:19:39
Serial Number (int): 399058386704040691918345081022306768460089
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: da:45:8e:e4:a1:ca:f9:f3:f6:f0:9a:9c:75:48:c7:f5:a5:fa:44:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:37:78:3f:76:1f:a1:3b:02:13:ac:86:bc:b9:7b:0e:c8:8f:6d:67
Fingerprint (sha256): 8a:19:6a:66:ae:29:ae:77:f2:12:b1:02:72:6a:ef:fd:67:ca:e7:49:46:a7:c1:9e:6c:62:d5:dc:c7:53:17:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nakrawedzi.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nakrawedzi.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1kaday-fasttrack.com
*.4163.au
*.91p2.com
*.alanalexanderpllc.com
*.aniplot.com
*.bnfs.at
*.christiancremations.com
*.coinagestunpro.com
*.corticolor.com
*.dixxucccp.com
*.eole.tv
*.fairygodboss.co
*.fieldprintsbrowardschools.com
*.filmz.info
*.healthyssentials.com
*.jinniumdm168.com
*.jotaylor.org
*.laverade.com
*.lehutv09.xyz
*.mickeycloth.com
*.mountkush.com
*.movieto.to
*.myitaliamcharms.com
*.nakrawedzi.org
*.nastyamateurs.net
*.newchinaexpress.com
*.nordichardwood.com
*.onewaytrailersblog.com
*.opportunitycredit.com
*.planetxeenl.com
*.portraitofacallgirl.com
*.qiutc.me
*.qutveg.com
*.raaajchat.com
*.rocaarquitetura.com
*.scrpg.info
*.sportbikecam.com
*.strikecompensation.co
*.substituteteacher.org
*.tesorofloorcovering.com
*.theeroticreviwe.com
*.tikrtok.com
*.victoriaschocolates.com
*.visionlogisticscenters.com
*.vodkasgard.org
*.xhss.me
*.xxmh459.com
*.xxmh465.com
*.yourkidsrights.com
*.zzgold.net
1kaday-fasttrack.com
4163.au
91p2.com
alanalexanderpllc.com
aniplot.com
bnfs.at
christiancremations.com
coinagestunpro.com
corticolor.com
dixxucccp.com
eole.tv
fairygodboss.co
fieldprintsbrowardschools.com
filmz.info
healthyssentials.com
jinniumdm168.com
jotaylor.org
laverade.com
lehutv09.xyz
mickeycloth.com
mountkush.com
movieto.to
myitaliamcharms.com
nakrawedzi.org
nastyamateurs.net
newchinaexpress.com
nordichardwood.com
onewaytrailersblog.com
opportunitycredit.com
planetxeenl.com
portraitofacallgirl.com
qiutc.me
qutveg.com
raaajchat.com
rocaarquitetura.com
scrpg.info
sportbikecam.com
strikecompensation.co
substituteteacher.org
tesorofloorcovering.com
theeroticreviwe.com
tikrtok.com
victoriaschocolates.com
visionlogisticscenters.com
vodkasgard.org
xhss.me
xxmh459.com
xxmh465.com
yourkidsrights.com
zzgold.net

Other certificates including the domain name nakrawedzi.org

(limited to 100 certificates)
nakrawedzi.org
nakrawedzi.org
nakrawedzi.org
nakrawedzi.org
nakrawedzi.org
nakrawedzi.org

Certificate

The complete raw certificate details for nakrawedzi.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399058386704040691918345081022306768460089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 15:06:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 15:06:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nakrawedzi.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 667180658440864598520737858529033014110225836629349961627756022515198813742503435395657238520321122306487160415654211395439036490523208104999829289008744182489435787102844874056926931436464101515898689122947015343812673351572699127411336207219515940966380517796567245548157482836022754884193438173958421962290852494354873059699093283796047393178722754026010535405413667771027642171886659975519370303060497022405677657451522416460289428430046529817140443778887295815245542498182532756875039061070191962555899901881885514544823009573270311408135076002219157008096298388971383573764994823921995513139730370303899524291461534163390759362771005313978869965490644790230007225171431425488538324738301736486466821664378967667001129170955927008492303273044807616736879719016970461620965601532834110237834604753711162097592187851725615760674774940570609921312426664726346244036920549782902155161337062391041353178587198057478983547549736397211907438389460505188054796138160276305149903826623217170903778818733963290181176384613481552572134655565291442709025408620647759412797354058793042448709148725524255875016144876730486602433933999021878279380144324781800719490507698198097030860141943290495410836663516626038922522627097607051604750539869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da458ee4a1caf9f3f6f09a9c7548c7f5a5fa44a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1848 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1kaday-fasttrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4163.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.91p2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alanalexanderpllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aniplot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnfs.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christiancremations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coinagestunpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corticolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dixxucccp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eole.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairygodboss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fieldprintsbrowardschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmz.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthyssentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jinniumdm168.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jotaylor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laverade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lehutv09.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mickeycloth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountkush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movieto.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myitaliamcharms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nakrawedzi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nastyamateurs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newchinaexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordichardwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onewaytrailersblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opportunitycredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planetxeenl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portraitofacallgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qiutc.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qutveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raaajchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocaarquitetura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrpg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportbikecam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strikecompensation.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.substituteteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tesorofloorcovering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theeroticreviwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tikrtok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victoriaschocolates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visionlogisticscenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vodkasgard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xhss.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxmh459.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxmh465.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourkidsrights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zzgold.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1kaday-fasttrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4163.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '91p2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alanalexanderpllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aniplot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnfs.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christiancremations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinagestunpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corticolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dixxucccp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eole.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairygodboss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldprintsbrowardschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmz.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyssentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jinniumdm168.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jotaylor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laverade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lehutv09.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mickeycloth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountkush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieto.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myitaliamcharms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakrawedzi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nastyamateurs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newchinaexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordichardwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onewaytrailersblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunitycredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetxeenl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portraitofacallgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiutc.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qutveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raaajchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocaarquitetura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrpg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportbikecam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strikecompensation.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'substituteteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesorofloorcovering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theeroticreviwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tikrtok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriaschocolates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visionlogisticscenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodkasgard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xhss.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxmh459.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxmh465.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourkidsrights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zzgold.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b4dd6ef490000040300483046022100c4ee2a368d7af4cb2a5eafc4f5d14709d67ca595f410d0b6294ccbf164a54e3e022100848f2d67e579f170cdfd25940353b19cffe3044bbfa828eaed38f86b54ce68ae00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b4dd6ef8b0000040300463044022033d861ae50a97f9838b0b567fb72060113fe18fe01b256a51699b1f08177194302204723a7443056be97ff7579cd92a9e4412f04935de9f5f07d90ed06c011b96b62
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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