skimthefat.com

Issued by R3

About this certificate

This digital certificate with serial number 04:16:c8:94:b2:67:c3:65:e5:de:36:91:d3:fb:66:37:a8:dc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=skimthefat.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:c8:94:b2:67:c3:65:e5:de:36:91:d3:fb:66:37:a8:dc
Serial Number (int): 356201973476883562064670162818374726822108
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 64:42:3b:19:35:d3:85:22:ed:7c:61:03:03:5c:87:bb:cd:3d:c9:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 39:2e:44:0c:af:b8:cf:e7:71:d0:fe:73:35:c5:23:0f:78:5a:c4:a8
Fingerprint (sha256): 92:44:ae:8d:90:9f:76:03:70:7d:b3:01:4a:68:11:c6:0c:20:a9:0d:0a:f7:76:ad:52:46:32:e0:44:45:9e:6c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate skimthefat.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skimthefat.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4980.in
*.520se.com
*.acehomecleaning.co
*.ameromarket.com
*.autoenlinea.com
*.bloomndales.com
*.buyethereum.au
*.clairesmobilehairdressing.com
*.craftzaloon.com
*.currentbitcoinexchangerate.com
*.daelmansdesigns.net
*.diablo-movie.com
*.diinvestasi.com
*.financialcalculator.com
*.fmyfreecams.com
*.fogmoney.xyz
*.frontiercreditcard.com
*.gbresort.com
*.giampaolo.com
*.hammaacher.com
*.hearthstonedecks.net
*.homeparks.com.au
*.hotoles.com
*.howtocakes.com
*.hsaeci.com
*.hypster.au
*.indianastudentloans.com
*.italiankeywords.com
*.kyrstannieday.com
*.laspiedras.com
*.macen.com
*.maybay.xyz
*.megaautosreforma.com.mx
*.morgageeducation.com
*.myscigna.com
*.navufederal.com
*.nishimuro.com
*.nncyber.com
*.onani2.com
*.paroquiasaojoaodebrito.com
*.served.com.au
*.skimthefat.com
*.spaeker.com
*.teknia-4k.online
*.torah.com.au
*.uconfrim.com
*.walmartmoneycards.com
*.whalic.com
*.yuexuyang.cc
*.zinopziz.com
4980.in
520se.com
acehomecleaning.co
ameromarket.com
autoenlinea.com
bloomndales.com
buyethereum.au
clairesmobilehairdressing.com
craftzaloon.com
currentbitcoinexchangerate.com
daelmansdesigns.net
diablo-movie.com
diinvestasi.com
financialcalculator.com
fmyfreecams.com
fogmoney.xyz
frontiercreditcard.com
gbresort.com
giampaolo.com
hammaacher.com
hearthstonedecks.net
homeparks.com.au
hotoles.com
howtocakes.com
hsaeci.com
hypster.au
indianastudentloans.com
italiankeywords.com
kyrstannieday.com
laspiedras.com
macen.com
maybay.xyz
megaautosreforma.com.mx
morgageeducation.com
myscigna.com
navufederal.com
nishimuro.com
nncyber.com
onani2.com
paroquiasaojoaodebrito.com
served.com.au
skimthefat.com
spaeker.com
teknia-4k.online
torah.com.au
uconfrim.com
walmartmoneycards.com
whalic.com
yuexuyang.cc
zinopziz.com

Other certificates including the domain name skimthefat.com

(limited to 100 certificates)
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com

Certificate

The complete raw certificate details for skimthefat.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356201973476883562064670162818374726822108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 04:26:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 04:26:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skimthefat.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727051866582380034346975926477896507310460830689155759821283977208655152119614732752769297626670697729245461639718073264261086841715306736918512571516737291124996606907340119215326162010278634214032000445297280501087458225453314588724591659136666004296437463621752901288581065994696372483459088361178240109053621400565696840785881693437606328596120883508375886520036718050327113040186941556064760786115077341497428943224649657700730437902997754593843729966001642223065411581480285054770009171760498656979474355875494344068045608089345956645239994263842621704902705640790560884076488631263171634907133396665062461935681912956311488375299034997361958892571638767956025268689569737367204496150302086910489670836903168911957595458530897556999428596324120271288417633144621712369374303205499939370624300426740641287405882566559218612288879946851494147965475127006292562533052645503651817345189099899219353106992683908331349328633811664562286518083604214922261375813940525103843760619788143844683204465965009627873242254427548765422566227843396154033451417487245541233430652656063857677557183044745122208528939678339086525807211329410644920490084959721880910271441621513854334441290931243726107102052520515534707444195316353052564435556877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64423b1935d38522ed7c6103035c87bbcd3dc97b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1832 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4980.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.520se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acehomecleaning.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ameromarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloomndales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buyethereum.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clairesmobilehairdressing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craftzaloon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.currentbitcoinexchangerate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daelmansdesigns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diablo-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diinvestasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financialcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmyfreecams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fogmoney.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frontiercreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gbresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giampaolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hammaacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearthstonedecks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeparks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howtocakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsaeci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypster.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianastudentloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.italiankeywords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kyrstannieday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laspiedras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maybay.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megaautosreforma.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morgageeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myscigna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.navufederal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nishimuro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nncyber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onani2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paroquiasaojoaodebrito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.served.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimthefat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spaeker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teknia-4k.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torah.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uconfrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walmartmoneycards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whalic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yuexuyang.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zinopziz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4980.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '520se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acehomecleaning.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameromarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloomndales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyethereum.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clairesmobilehairdressing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftzaloon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currentbitcoinexchangerate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daelmansdesigns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diablo-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diinvestasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmyfreecams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fogmoney.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontiercreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giampaolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hammaacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearthstonedecks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeparks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtocakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsaeci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypster.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianastudentloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italiankeywords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyrstannieday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laspiedras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maybay.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megaautosreforma.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morgageeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myscigna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navufederal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nishimuro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nncyber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onani2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paroquiasaojoaodebrito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'served.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skimthefat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaeker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknia-4k.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torah.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uconfrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walmartmoneycards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whalic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yuexuyang.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinopziz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b1d336b310000040300473045022100a1e3ebef55528e0784d656d98fbf81995c3686272b9398bedc5bb8215419377b0220549faab61623f84feca88998abdb0804ffc381dd0ee9237c4be1ea76f0d16250007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b1d336b61000004030047304502210089a946d6d511745a0bcffa981d85d5829389ff8101231dac44a277fb1f34445402200275e246e57f0de558f791d6bdace4bc0728a0a135301612afaf6fab2c6a7551
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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