testmoz.co

Issued by R3

About this certificate

This digital certificate with serial number 04:a7:1d:86:ac:62:4a:06:2e:e5:f5:9a:2f:37:1d:55:c4:73 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=testmoz.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a7:1d:86:ac:62:4a:06:2e:e5:f5:9a:2f:37:1d:55:c4:73
Serial Number (int): 405315545878856237332333366282930030494835
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1e:db:af:ed:9a:3b:2d:54:78:ec:78:6a:21:4a:b0:2d:b5:82:b4:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fb:a6:ba:52:3d:df:2e:53:f2:d0:21:8a:d5:05:0c:f3:7c:0f:8c:ba
Fingerprint (sha256): 8a:50:34:70:69:ca:1d:da:72:24:0b:03:e0:21:51:6f:65:49:f4:c6:b7:48:36:90:e8:d5:fe:07:5e:c3:12:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate testmoz.co

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for testmoz.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5-0taxi.com
*.andalib.com
*.arkid.net
*.bike-componenets.de
*.boostmobiloe.com
*.brokeno.money
*.carringtonlabs.com
*.charliechaselive.com
*.cottondental.com
*.dcdnwmgsdgc.co
*.entrancement.uk
*.eqtest.com
*.eritik1.nl
*.familiafeliz.com
*.fundsjoy.club
*.gaybostube.com
*.greendkyonline.com
*.harborgreens.com
*.ht984.cn
*.jsjc.tokyo
*.kambali.info
*.karyanet.com
*.kebek.de
*.naughtyamwrica.com
*.ncx.in
*.neero.com.au
*.pbgov.com
*.pdffu.com
*.pokemonfire.tv
*.pumpkinpie.com.au
*.rapping.com
*.realcouples.uk
*.rtpddnatin.com
*.rustynutscarclub.com
*.sakfirst.com
*.sportsauthority.com.au
*.superips.co
*.tennisshorts.com.au
*.testmoz.co
*.teximpo.shop
*.tiangongsheji.com
*.traunch.com
*.umcollege.com
*.wajwine.com
*.watchmovie.mx
*.wathseries.mx
*.wwwaiicfl.com
*.wwwphhmortgage.com
*.xn--brbel-drexel-naturheilpraxis-5mc.de
5-0taxi.com
andalib.com
arkid.net
bike-componenets.de
boostmobiloe.com
brokeno.money
carringtonlabs.com
charliechaselive.com
cottondental.com
dcdnwmgsdgc.co
entrancement.uk
eqtest.com
eritik1.nl
familiafeliz.com
fundsjoy.club
gaybostube.com
greendkyonline.com
harborgreens.com
ht984.cn
jsjc.tokyo
kambali.info
karyanet.com
kebek.de
naughtyamwrica.com
ncx.in
neero.com.au
pbgov.com
pdffu.com
pokemonfire.tv
pumpkinpie.com.au
rapping.com
realcouples.uk
rtpddnatin.com
rustynutscarclub.com
sakfirst.com
sportsauthority.com.au
superips.co
tennisshorts.com.au
testmoz.co
teximpo.shop
tiangongsheji.com
traunch.com
umcollege.com
wajwine.com
watchmovie.mx
wathseries.mx
wwwaiicfl.com
wwwphhmortgage.com
xn--brbel-drexel-naturheilpraxis-5mc.de

Other certificates including the domain name testmoz.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for testmoz.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsYdvoRAUbtPLUOSzwNX8
2TMI92hG3Xgd6GlBgl0S35mtURcHsacoaMiA5BR4oHFEqGjjiJFc6nDypq0oalSO
MyeeX3gDFI3w6wQmYvL/Ox2RqscJ8rUKI2pUmfkGUVJncT+OHDyvB7TfnwKj/Dgd
bJxvQyPYxhtHFlpFv2Ix1n9kyJqXcnmFL6PqgYk2xKue3OKWIqJtTjEb/yNlyF63
h2MFBQDWpVOFsxIaRQOneiTNxUPfHntLKnX06VgBjdNQdAanG+NrGt65QrYyAuN7
A5CfbIfCf+5L0sPGJdL58pVaCpsZsgYijc7EQJ9p57wagzbrFNCMEjvEtx++CcHB
xlrKpBUGA7DND0lu9UMK6X3+33aa4mLHL8e6wae8k8ysC6uV/TlA8Jh16PEdVC5P
tfXjdOVE/UraR/s9a6aGMMXucIMqvIMRKcRCqzLuXLyQoViSB3jfKEhY+EVxvjR3
cCzwAjAvFLUA0pflKVnZzpZ7Guj2LbhPooQbiS0tgtW2kz2pE/Vl7Ol+5+mSJ+He
YCFhmtu+fVbRduJHBsyXs44ObtoPZkT2wp70hrqZLCXlHV21zH5lfFMvyXm9129a
6PrY+HY7mJCS6cB8iOidUx7oMa6mGZDeYloWL21PU/3rtD97TOb/ilpnVDNnD4lY
qOth8+xrNFl8uLx2UrKIX9cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405315545878856237332333366282930030494835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 22:32:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 22:32:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testmoz.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724255323803554074056590478459100916482679161293581421045978663163741159010159635847249111892484401186795829766630273110477553425496320076545709336655223521946062581277993866346181661973033632684873890358767607841629024811762097652510395904384191884715446036081824076722399295239867977279215059700746870199043533441201258341412457718962948347426775997495526536538899715776161200660138750921668918754751677934960760408605152144228739158497206420833001935672168863951616313226351142250628673013434800889340963974916646263085559875453404083336146940026161577263260551109008216308486968785937241264884918232803261173747227236287894917289913953656798709300425987839966244957957894098565668232589293693340220996964982893061368704736882574676679423620486307973512199466841464866622944497813420822745453321709742338390241490845484884566874878806152070857444105342953543526761660907387021533196589537934589457643365578764279867593140164705325225051251977312296295542756062549901506752098486717278655728323156122439983404185185373762796543679617405868707868584006939245270428594267777182806104036856066241217088870905628793675258647775593461436102602775493542212440241717591966668449252463172356763405503181879549260037215065323263917927456727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1edbafed9a3b2d5478ec786a214ab02db582b426
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1672 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5-0taxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andalib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arkid.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bike-componenets.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boostmobiloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brokeno.money'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carringtonlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charliechaselive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cottondental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcdnwmgsdgc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entrancement.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eqtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eritik1.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familiafeliz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundsjoy.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaybostube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greendkyonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harborgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ht984.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jsjc.tokyo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kambali.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karyanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kebek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naughtyamwrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncx.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neero.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pbgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdffu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokemonfire.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pumpkinpie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realcouples.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtpddnatin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rustynutscarclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sakfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsauthority.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superips.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tennisshorts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testmoz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teximpo.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiangongsheji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wajwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchmovie.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wathseries.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwaiicfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwphhmortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brbel-drexel-naturheilpraxis-5mc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5-0taxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andalib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkid.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bike-componenets.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boostmobiloe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokeno.money'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carringtonlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charliechaselive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottondental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcdnwmgsdgc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entrancement.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eqtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eritik1.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familiafeliz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundsjoy.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaybostube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greendkyonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harborgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ht984.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsjc.tokyo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kambali.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karyanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kebek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naughtyamwrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncx.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neero.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdffu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokemonfire.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pumpkinpie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realcouples.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtpddnatin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rustynutscarclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sakfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsauthority.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superips.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennisshorts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testmoz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teximpo.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiangongsheji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wajwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchmovie.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wathseries.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwaiicfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwphhmortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brbel-drexel-naturheilpraxis-5mc.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bd02dba200000040300483046022100b15a31b6cabd135206b3062986ef197a6a96c1faa5d06ed6ea329e94660a78ad022100a4fdd301d56b47daaf5f0682c8500653785f5f6eda42daa6ad4366c1e7ccf68f0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd02dba23000004030046304402204b2defab61786611d4f0b0ed7adf8d0269b426aa247979baafb9bc538508915b0220697562437e5afdd836cbfc30bb581cdb39826df9661b5e5c6cc5c980b2c44787
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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