barneyclay.com

Issued by R3

About this certificate

This digital certificate with serial number 04:50:92:e1:e1:49:c8:12:1b:46:74:d3:f6:f7:35:29:f9:76 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=barneyclay.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:50:92:e1:e1:49:c8:12:1b:46:74:d3:f6:f7:35:29:f9:76
Serial Number (int): 375866973204281567293825691372987643197814
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e9:10:84:18:09:82:89:db:db:0e:ab:57:2c:bf:21:f7:19:a4:3f:ef
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 70:4d:94:0f:25:0c:43:b6:45:1b:3f:3a:db:2c:64:c7:15:d4:1f:cc
Fingerprint (sha256): 95:57:41:a4:1c:af:3d:6d:2a:af:f9:4b:d0:78:05:9f:85:7d:3f:0e:45:d5:e1:f0:cd:3e:e2:ef:40:5d:59:07

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate barneyclay.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barneyclay.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abacus-arte.com
*.absolutgranada.com
*.baoshuu.cc
*.barneyclay.com
*.bestfantasystories.com
*.botanicandterre.com
*.brindisimydestination.com
*.broome-tioganaacp.org
*.budowamyjnubezdotykowych.pl
*.buuurn.com
*.canarygirl.com
*.cheaprealjewelry.com
*.cloudworks.com.au
*.comapany.site
*.ctamtve.com
*.cuacuonaustdoorvn.com
*.cutlink.org
*.ejournal1.com
*.elpartidodelau.com
*.ethiodailypost.com
*.globalamericanmedical.com
*.harvestgroundimport.com
*.healthcarecommunicators.org
*.hkjenis.com
*.hospitaldivinaprovidencia.org
*.icefust.net
*.jedimouseketeer.com
*.jld-radcon.com
*.lavora-da-casa.online
*.lifbay.com
*.mrfellows.net
*.multi114.com
*.mustanggt.info
*.noirthetic.com
*.ostst-altimetry-2022.com
*.qianli2.xyz
*.revive275.com
*.robogalsqueens.org
*.serveyourcountryfood.net
*.sexykid.com
*.specialtylife.com
*.stcrispin.org.uk
*.suggestions.in
*.thatnorwegianguy.com
*.theretroblog.com
*.trujlojnosto.com
*.webinawithjohn.com
*.whatanime.com
*.wow197.com
*.zlibs.tips
abacus-arte.com
absolutgranada.com
baoshuu.cc
barneyclay.com
bestfantasystories.com
botanicandterre.com
brindisimydestination.com
broome-tioganaacp.org
budowamyjnubezdotykowych.pl
buuurn.com
canarygirl.com
cheaprealjewelry.com
cloudworks.com.au
comapany.site
ctamtve.com
cuacuonaustdoorvn.com
cutlink.org
ejournal1.com
elpartidodelau.com
ethiodailypost.com
globalamericanmedical.com
harvestgroundimport.com
healthcarecommunicators.org
hkjenis.com
hospitaldivinaprovidencia.org
icefust.net
jedimouseketeer.com
jld-radcon.com
lavora-da-casa.online
lifbay.com
mrfellows.net
multi114.com
mustanggt.info
noirthetic.com
ostst-altimetry-2022.com
qianli2.xyz
revive275.com
robogalsqueens.org
serveyourcountryfood.net
sexykid.com
specialtylife.com
stcrispin.org.uk
suggestions.in
thatnorwegianguy.com
theretroblog.com
trujlojnosto.com
webinawithjohn.com
whatanime.com
wow197.com
zlibs.tips

Other certificates including the domain name barneyclay.com

(limited to 100 certificates)
barneyclay.com
barneyclay.com
barneyclay.com
pubgf.co
barneyclay.com
barneyclay.com
barneyclay.com
pubgf.co
barneyclay.com
barneyclay.com
pubgf.co

Certificate

The complete raw certificate details for barneyclay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375866973204281567293825691372987643197814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 19:40:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 19:40:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barneyclay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 676981546137220678240337817512164478552041687665322667412630478100639368137130318213929324664129033619439068255692827925505222039802324142824631791939775998377298401001962304216465941533026434208823951092421718101766535425364406153104165574692315549709476286952919808396837630022261076971047892784092674441822995021988562864252096630321207590165375559432883415509436973882851455741892456344843772871259028327318854255585144614614561899013864264509734094794199725573227315959309912767506959998819762587201042100965111987623722715037929752854136220666438109138047394720380586530802787464957130462711457137966114813600497424195643073455451714397614148649197007757836525128497966507671306655850665326635979899827135261278835255688420532518135477335758846872659221147219468146924380353933559723067218550631444079510651583321454565411663274336372330103035468528076950751442144373663244973062158128491238688127926038078373294263728014903255503841941434367065730489707701650083339978565187028552996971981046330032043411844760707881109842286998738815251166730067406032949617221767683861851387890781888944194531635585081316561435640622356780973355043071816480328548039740512879271482492291626293816776740010187747790732343878805638788336357493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9108418098289dbdb0eab572cbf21f719a43fef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1966 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abacus-arte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.absolutgranada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baoshuu.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barneyclay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestfantasystories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botanicandterre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brindisimydestination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broome-tioganaacp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budowamyjnubezdotykowych.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buuurn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canarygirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheaprealjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudworks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comapany.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctamtve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuacuonaustdoorvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cutlink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ejournal1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elpartidodelau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ethiodailypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalamericanmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harvestgroundimport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthcarecommunicators.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hkjenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hospitaldivinaprovidencia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icefust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jedimouseketeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jld-radcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavora-da-casa.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrfellows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multi114.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mustanggt.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noirthetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ostst-altimetry-2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qianli2.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.revive275.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robogalsqueens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serveyourcountryfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexykid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialtylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stcrispin.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suggestions.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thatnorwegianguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theretroblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trujlojnosto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webinawithjohn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whatanime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wow197.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zlibs.tips'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abacus-arte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absolutgranada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baoshuu.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barneyclay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestfantasystories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botanicandterre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brindisimydestination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broome-tioganaacp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budowamyjnubezdotykowych.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buuurn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canarygirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheaprealjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudworks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comapany.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctamtve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuacuonaustdoorvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutlink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejournal1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpartidodelau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethiodailypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalamericanmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvestgroundimport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcarecommunicators.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkjenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitaldivinaprovidencia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icefust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jedimouseketeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jld-radcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavora-da-casa.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrfellows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multi114.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mustanggt.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noirthetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostst-altimetry-2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qianli2.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revive275.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robogalsqueens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serveyourcountryfood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexykid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialtylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcrispin.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suggestions.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatnorwegianguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theretroblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trujlojnosto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinawithjohn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatanime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wow197.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zlibs.tips'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ccbe8164a000004030048304602210092e809c2d507b1450d0d68aae0789232ad44ec6434ca46dab2ae0e01638417b9022100f995a528062835b7daa0a6b41290f9c4b8800c00c7a16422cdad777798f2fb9000760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018ccbe8175a0000040300473045022041c98d2e70bfb8e8ae9d7330c208317894af052f087d9392afdb1f81a911462f022100cb1113a6260c940c04fe9f2c628ff3fae0d732ccdc0ceed290a2edd97df5d322
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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