nsatygal.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e5:8d:e5:92:e9:a1:c8:29:3d:3d:ee:6b:1c:5e:a9:35:8c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nsatygal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e5:8d:e5:92:e9:a1:c8:29:3d:3d:ee:6b:1c:5e:a9:35:8c
Serial Number (int): 426562418915064205398674125236860646667660
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:5a:a6:c5:8a:b5:26:7b:f3:c1:02:cf:8e:1b:57:89:1e:d3:d5:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bf:e4:f0:32:02:93:d6:0a:52:f4:d1:b1:3f:98:19:9e:8e:99:96:b3
Fingerprint (sha256): 97:80:82:46:f5:a4:2c:01:8a:73:0f:43:50:e0:35:79:57:39:33:e3:f3:e7:15:4f:ad:6d:29:80:86:e9:79:72

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nsatygal.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nsatygal.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.affnityfcu.com
*.all-fly.info
*.alljapaneseass.com
*.amartsports.com.au
*.amber-bridal.net
*.andreotti.com
*.atlanticarms.com
*.backyarddrivein.com
*.blackwomenincomedyfestival.com
*.charton.com
*.clarkcountyassessor.com
*.dgz7.xyz
*.ergal.org
*.excel-id.com
*.expressacount.com
*.freedentist.com
*.freymond.com
*.greenlifesolar.com.au
*.houstonauction.com
*.iamnaught.com
*.icetrekkr.com
*.kxig.com
*.landandplan.com
*.lotho.com
*.momo7979.me
*.momochichoco.com
*.netxinvesor.com
*.nordstromcarf.com
*.northerntrst.com
*.novaemlak.com
*.nsatygal.com
*.ompointcu.com
*.onpointfit.com.au
*.schoolfood.com
*.scriptrunner.pro
*.slidehunte.com
*.stockkx.com
*.sutdy.com
*.t8nder.com
*.teacherrspayteachers.com
*.tehcu.com
*.tidalwaves.com
*.truereigion.com
*.tymtractor.com
*.tysiecy.com
*.vasavada.com
*.vcanguard.com
*.wanjuanwenyin.com
*.worklntexas.com
*.yourmuze.fm
affnityfcu.com
all-fly.info
alljapaneseass.com
amartsports.com.au
amber-bridal.net
andreotti.com
atlanticarms.com
backyarddrivein.com
blackwomenincomedyfestival.com
charton.com
clarkcountyassessor.com
dgz7.xyz
ergal.org
excel-id.com
expressacount.com
freedentist.com
freymond.com
greenlifesolar.com.au
houstonauction.com
iamnaught.com
icetrekkr.com
kxig.com
landandplan.com
lotho.com
momo7979.me
momochichoco.com
netxinvesor.com
nordstromcarf.com
northerntrst.com
novaemlak.com
nsatygal.com
ompointcu.com
onpointfit.com.au
schoolfood.com
scriptrunner.pro
slidehunte.com
stockkx.com
sutdy.com
t8nder.com
teacherrspayteachers.com
tehcu.com
tidalwaves.com
truereigion.com
tymtractor.com
tysiecy.com
vasavada.com
vcanguard.com
wanjuanwenyin.com
worklntexas.com
yourmuze.fm

Other certificates including the domain name nsatygal.com

(limited to 100 certificates)
taksitlearaba.net
ncavarsity.com
usaaensurance.com
bisnow.co
*.2k9.net
nsatygal.com
carregandapp.online
carregandapp.online
nsatygal.com
nsatygal.com
fundingcirce.com
nsatygal.com
ofrice.com

Certificate

The complete raw certificate details for nsatygal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426562418915064205398674125236860646667660
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 03:01:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 03:01:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nsatygal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868849574193775409595189909322762285079363006705017893006297205919218283904284701418897748453875713687323958939139312397635763977487367398750163617856064468907592975447199390296177681004634328723155125162105740535608445735638097823683795825834865240829532202984018696309572802505219384295076278791350298274320354395883510191343628567282132171093692353539473660539301974825910980853698443239936699470543506100545089927845006601726361404222868584719744218054662397435869456040110771001400998195681855725790823055372361994616548451686300997258982729907161301253246256065207866246380080018630171981717855547380477652074113865799181091483236974869990095543291045009324273479579708577214547053907409552643076702988456803534059098120200555746797096255423160872857682772287891483467448312521425330965144473573068460579202726964379566153904269835809647773401838681864627988903355258264599737035657392445581936922158040076647223931194752475749571884486609465636498956704837598999732419279943351823580459486823235873601666048152317413686012258552363186908399526311309909091570211562751167675184247473673737637454366016161543322815891956430841839475635211449952353740721372113121129949100690035309462883451855515525840114915522485229082376950911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							215aa6c58ab5267bf3c102cf8e1b57891ed3d5ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1742 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affnityfcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.all-fly.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alljapaneseass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amartsports.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amber-bridal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andreotti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlanticarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backyarddrivein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackwomenincomedyfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarkcountyassessor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgz7.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ergal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excel-id.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expressacount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freymond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenlifesolar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houstonauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iamnaught.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icetrekkr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kxig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landandplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lotho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.momo7979.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.momochichoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netxinvesor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordstromcarf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northerntrst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novaemlak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nsatygal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ompointcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onpointfit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoolfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scriptrunner.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slidehunte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stockkx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sutdy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t8nder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teacherrspayteachers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tehcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tidalwaves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truereigion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tymtractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tysiecy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vasavada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcanguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wanjuanwenyin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worklntexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourmuze.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affnityfcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'all-fly.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alljapaneseass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amartsports.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amber-bridal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andreotti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backyarddrivein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackwomenincomedyfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarkcountyassessor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgz7.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ergal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excel-id.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressacount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freymond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlifesolar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamnaught.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icetrekkr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kxig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landandplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momo7979.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momochichoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netxinvesor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordstromcarf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novaemlak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsatygal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ompointcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onpointfit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scriptrunner.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slidehunte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockkx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sutdy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't8nder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacherrspayteachers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tehcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tidalwaves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truereigion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tymtractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tysiecy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vasavada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcanguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanjuanwenyin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worklntexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourmuze.fm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ad9f289aa0000040300463044022053def25b9ce96231c793c62f9f7894f345db349b9b64ac024ce6b8a4616670dd0220583aff14cefe47ec7ababc5eb7f0ae11f09892a5e115cd00874f2a5286ccae770076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ad9f289be000004030047304502202438799a59cddb8c7d9980b04ccc1978dd6dbdeda2dab764276d2708c6d1abd70221009f7408664a9aa3fa9af9ca8af74239600d2379100a3006ea2ca965ab88bc67c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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