tasjaceramics.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5d:c3:9b:7c:e9:34:26:31:3d:c1:c5:6a:81:ae:5b:e9:d4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tasjaceramics.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5d:c3:9b:7c:e9:34:26:31:3d:c1:c5:6a:81:ae:5b:e9:d4
Serial Number (int): 380355410649374487292945851365641854642644
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 22:47:4a:c3:01:42:cb:3c:5a:5a:0d:c0:c0:21:8b:d8:8a:a8:ec:b7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c5:8e:7a:4c:dc:a3:25:3f:dc:b4:6f:eb:17:cd:2d:61:8f:2b:4f:85
Fingerprint (sha256): 8f:f5:04:10:5c:34:e1:e7:ee:50:c4:9f:a5:d6:66:f9:10:59:48:b9:7e:5e:12:8a:81:a2:b1:ca:e5:fc:da:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tasjaceramics.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tasjaceramics.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5gm9.com
*.aimfhealt.com
*.athletuc.net
*.bootstrapcroc.com
*.braincompute.com
*.brazildanceworld.com
*.businesscache.us
*.clarkparkartists.com
*.crypcram.com
*.cubeyogi.com
*.dsionlabs.com
*.filmywep.net
*.gbizg.net
*.guadalajara.house
*.guangzhou.events
*.guayaquil.land
*.guitars.supplies
*.haicantr.com
*.iexpresstransfers.com.au
*.indian-tandoori-pizza.com
*.indiancoffeehousedelhi.com
*.lauras.farm
*.lokaranjanaquaworld.com
*.mayslandingnj.com
*.megatvonline.site
*.menteg.com
*.nabadat10.com
*.nextgenaffiliates.com
*.nickname.cc
*.phub.info
*.pmaynald.com
*.rentcarsamara.com
*.rgterterth.com
*.sexvodshare.com
*.sokankan56.cc
*.sporlig2.tv
*.supermonetiza.com
*.surfyhechannel.com
*.surtthechannel.com
*.sushi-senyu.com
*.sushiya-restaurant.com
*.svcorsoimplantologia.com
*.sweetesttaboodonuts.com
*.swimstark.com
*.tasjaceramics.com
*.toindren.us
*.triathleteblog.net
*.tymsjs.com
*.ucqfarma.com
*.zubokura.com
5gm9.com
aimfhealt.com
athletuc.net
bootstrapcroc.com
braincompute.com
brazildanceworld.com
businesscache.us
clarkparkartists.com
crypcram.com
cubeyogi.com
dsionlabs.com
filmywep.net
gbizg.net
guadalajara.house
guangzhou.events
guayaquil.land
guitars.supplies
haicantr.com
iexpresstransfers.com.au
indian-tandoori-pizza.com
indiancoffeehousedelhi.com
lauras.farm
lokaranjanaquaworld.com
mayslandingnj.com
megatvonline.site
menteg.com
nabadat10.com
nextgenaffiliates.com
nickname.cc
phub.info
pmaynald.com
rentcarsamara.com
rgterterth.com
sexvodshare.com
sokankan56.cc
sporlig2.tv
supermonetiza.com
surfyhechannel.com
surtthechannel.com
sushi-senyu.com
sushiya-restaurant.com
svcorsoimplantologia.com
sweetesttaboodonuts.com
swimstark.com
tasjaceramics.com
toindren.us
triathleteblog.net
tymsjs.com
ucqfarma.com
zubokura.com

Other certificates including the domain name tasjaceramics.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tasjaceramics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380355410649374487292945851365641854642644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 12:22:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 12:22:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tasjaceramics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 934552676970941038748649019884572458620255703597723550679807044326915186698371345001714490792934259842596632888951188130692395112603736031483718116557037610196387523809317640042525319359065763479169930387401519385180850194514489396793595968542397547373950502083927743594486500300076002458565478896783311988706903904565178679779019672936888593763422425964228096983470915028700315827939837620195953414410043383625527955353056785726126253518038829078339189260881843446841744496375910027539493262790192106749756874980565371801523001341826731391849783367203664831017130691080328215121803562141697695120104538354853233466019147271525955904920811963658156608313616390551147848783401890444042338499672556412838388264386598302805122329284178608613048080041291897793558148192935927470440175044294320365674278095421618226960725289316007639091167353300062652820812108547011458830108180182695485308082668486331278775311798890616919720801706882667997922886492444633845876904187261445792028382844267848881454265645549471553642526833693165996446589257120627209535231033051584388591307437939163602248842575860731541197693016940390749822554781762078675135204176459308002966233742571514672907026642545262700459428151534406436631207009866539430802375457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22474ac30142cb3c5a5a0dc0c0218bd88aa8ecb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1852 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5gm9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aimfhealt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.athletuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bootstrapcroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.braincompute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brazildanceworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesscache.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarkparkartists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crypcram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cubeyogi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsionlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmywep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gbizg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guadalajara.house'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guangzhou.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guayaquil.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guitars.supplies'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haicantr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iexpresstransfers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indian-tandoori-pizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indiancoffeehousedelhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lauras.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lokaranjanaquaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayslandingnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megatvonline.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menteg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nabadat10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextgenaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nickname.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phub.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pmaynald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentcarsamara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rgterterth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexvodshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sokankan56.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sporlig2.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supermonetiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surfyhechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surtthechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sushi-senyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sushiya-restaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svcorsoimplantologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetesttaboodonuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swimstark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tasjaceramics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toindren.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triathleteblog.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tymsjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ucqfarma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zubokura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5gm9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimfhealt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bootstrapcroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braincompute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazildanceworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesscache.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarkparkartists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crypcram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cubeyogi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsionlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmywep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbizg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guadalajara.house'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guangzhou.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guayaquil.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guitars.supplies'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haicantr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iexpresstransfers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indian-tandoori-pizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiancoffeehousedelhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lauras.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lokaranjanaquaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayslandingnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megatvonline.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menteg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nabadat10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextgenaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickname.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phub.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmaynald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentcarsamara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgterterth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexvodshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sokankan56.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporlig2.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supermonetiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfyhechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surtthechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushi-senyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushiya-restaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svcorsoimplantologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetesttaboodonuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swimstark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasjaceramics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toindren.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triathleteblog.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tymsjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucqfarma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zubokura.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c2064ec5e0000040300473045022100f3142ed547fd88dc2db6ab5b0c0374d4144c2be34b529dc72ba602bd1ac8619a02201d609683797e2781d3d1ff6d5acba3c9393a46b38fb3a940467d87f6b05f716f0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c2064ec6c0000040300483046022100b526f10f02146b09224c834c9d964f750c264ce6cc6717cdcf6cab6831a5129e022100b65180309a75f084faca363161fe6642c556fc5333c46e751cbbef588e7ccce0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b65a7c8c5c67a319ae8b1d3674c05bef115ed2f93eb6f2a8595afad46db1f4a0c39271e2d8970c946a898ba8fc0ce9e2ed713cdad4c517319679d193758c35b7ffa79c0ea2bc7362e0acfb2f7a14a85fd06929af8bc11a89396da13450f4f2b9e285578945f2a43e0e2368290da2e201298d2cc1447cd76a8aa11fa51e444f2dfb36e6859dd6933e911e425892c512c6e19df0bb81c0234470934e81bdf4d51b8eb6b6733dd35dcb7ed9aa4e941e8ee40864fd61cb5a8775a106d4ce62adec8834e903816470c4c148e4024faa9d6b5130011ecb1201e5dc15409d329e3f1f38bfe31db3262720ddf716e4cf61d75cda1266640b2c37df154a63bbea1d6eaf57