yu-kikai.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d7:1f:e6:b3:ca:21:0a:dd:55:19:cd:08:16:e4:67:86:e2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=yu-kikai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:1f:e6:b3:ca:21:0a:dd:55:19:cd:08:16:e4:67:86:e2
Serial Number (int): 421652256557755185654861246366571240589026
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b2:0c:fe:3a:63:08:e1:99:62:43:f4:67:d3:39:f2:ee:9a:ad:72:21
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1f:a4:81:e4:c2:7f:d6:55:3e:95:2f:5f:d4:77:ac:f3:de:77:51:87
Fingerprint (sha256): 98:94:91:88:7a:e3:d2:50:cc:d7:61:7e:f1:3b:f5:d8:cd:4c:2c:f5:88:4c:26:a5:f9:6a:ea:24:db:16:42:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate yu-kikai.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yu-kikai.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.40wholefoods.com
*.accountverificationback.com
*.acutabovetreeservicect.com
*.allaboutwindowsandmore.com
*.ampsharesale.com.au
*.autorepairexpresshb.com
*.beetlas.com
*.btcat.org
*.buscadordeparejas.net
*.cinemotions.net
*.clubdeportivotorrevieja.com
*.dronsta.net
*.dtatrosmoving.com
*.emergenciaselhierro.org
*.emergencyloans.co
*.enney.com
*.facebookg.com
*.ica-e.info
*.jeremywillislawoffice.com
*.kine-master.xyz
*.lagoslawn.com
*.lehighvalleypavinginc.com
*.libink.pl
*.losescapularios.com
*.lucyjsmith.com
*.maconseptic.com
*.matureisnaked.com
*.megapest.net
*.missionoakswine.com
*.namasteastu.com
*.polinsumos.com
*.prestatie.com
*.primetimecards.com
*.quicksuport.me
*.raptil.com
*.realitygfslut.com
*.risingstarprofessionals.com
*.roundhillhomestead.com.au
*.salonahead2toesalon.com
*.succes360.com
*.tgmax.com
*.thecomicfestival.com
*.theharfford.com
*.vandnconstruction.com
*.verminbuilds.com
*.vg30.com
*.y3lat.com
*.yableaccess.us
*.yourlense.com
*.yu-kikai.com
40wholefoods.com
accountverificationback.com
acutabovetreeservicect.com
allaboutwindowsandmore.com
ampsharesale.com.au
autorepairexpresshb.com
beetlas.com
btcat.org
buscadordeparejas.net
cinemotions.net
clubdeportivotorrevieja.com
dronsta.net
dtatrosmoving.com
emergenciaselhierro.org
emergencyloans.co
enney.com
facebookg.com
ica-e.info
jeremywillislawoffice.com
kine-master.xyz
lagoslawn.com
lehighvalleypavinginc.com
libink.pl
losescapularios.com
lucyjsmith.com
maconseptic.com
matureisnaked.com
megapest.net
missionoakswine.com
namasteastu.com
polinsumos.com
prestatie.com
primetimecards.com
quicksuport.me
raptil.com
realitygfslut.com
risingstarprofessionals.com
roundhillhomestead.com.au
salonahead2toesalon.com
succes360.com
tgmax.com
thecomicfestival.com
theharfford.com
vandnconstruction.com
verminbuilds.com
vg30.com
y3lat.com
yableaccess.us
yourlense.com
yu-kikai.com

Other certificates including the domain name yu-kikai.com

(limited to 100 certificates)
*.041478.com
academiaversal.com
primarycourses.com
soyuz-a.com
academiaversal.com
yu-kikai.com
yu-kikai.com
yu-kikai.com
soyuz-a.com

Certificate

The complete raw certificate details for yu-kikai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421652256557755185654861246366571240589026
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 21:49:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 21:49:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yu-kikai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864768944444139914781609357983024146061204060793593369674437477597838491515312106503835059010330301341954475910753852110286298298096262324313392612077476210880960346205185750075769200885273190590706589255565730253062513171377702267158325976061471605299723245295569602508155764715441058237106373296881904216226271355128432222270567717401457214580875892182591454185258634613766620187718002330209039204326635860065137144184527351105104647836663401245598807133504740039807877167713229364070322743354391395600534405007281744742440207507792374299589214525186416900140409699200029165814150841744910194059659123726376946330791949626035413268634175180911725744629817924541778803992186353911274571728182210174505621575243308873342770568608450549533133302917675280338207366075774534015214361308809682870794164391259866781678633332804234327815405630785546593056788457422260385592666611781831881346300815083814173005605983857530217163679424473997747068256438928765795430001462654846529749368987986664063579108259003400946879538792252593413023782797449885786733923448076744273183300855553991682323523222571730652197451791057017110042565833273633175207699289411020726327231542718387559835784165963204916434699423122066634159158268186974936827036367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b20cfe3a6308e1996243f467d339f2ee9aad7221
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1962 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.40wholefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accountverificationback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acutabovetreeservicect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allaboutwindowsandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ampsharesale.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autorepairexpresshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beetlas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btcat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buscadordeparejas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinemotions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubdeportivotorrevieja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dronsta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dtatrosmoving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emergenciaselhierro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emergencyloans.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facebookg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ica-e.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeremywillislawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kine-master.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagoslawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lehighvalleypavinginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libink.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losescapularios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucyjsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maconseptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matureisnaked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megapest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.missionoakswine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.namasteastu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polinsumos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prestatie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primetimecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quicksuport.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raptil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realitygfslut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risingstarprofessionals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roundhillhomestead.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salonahead2toesalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.succes360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tgmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecomicfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theharfford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vandnconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verminbuilds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vg30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.y3lat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yableaccess.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourlense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yu-kikai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '40wholefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountverificationback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acutabovetreeservicect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allaboutwindowsandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampsharesale.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autorepairexpresshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beetlas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btcat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buscadordeparejas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemotions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubdeportivotorrevieja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dronsta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtatrosmoving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergenciaselhierro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencyloans.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebookg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ica-e.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeremywillislawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kine-master.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagoslawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lehighvalleypavinginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libink.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losescapularios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucyjsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maconseptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matureisnaked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megapest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionoakswine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namasteastu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polinsumos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestatie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primetimecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quicksuport.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raptil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realitygfslut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risingstarprofessionals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roundhillhomestead.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salonahead2toesalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succes360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecomicfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theharfford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vandnconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verminbuilds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vg30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'y3lat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yableaccess.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourlense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yu-kikai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e821a55f10000040300473045022100a3309a91d10a52c0b98b8bb3542bd1670303caee741b53f8b2471f467371adee022039f21b91bbeb54fea2f1fb872c1d136eac6d0f3bb3bcc5577986a8e5b7da4c0400750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e821a5686000004030046304402204589383d27ccb79bd7518b1fb8f00587304fcd6023f2e750dbfd1649c984d8db022040b142533c92a726b07da45fe63b0124f49431a67088e43806f9fa7bc306fee7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008bb9a1348e492d5072d82c28acf38a7091d8c97fd6fe3641fa7e5078b88c499f1d3648ec3015f6992cfe0de2acccce5993792cfe6c80938d46f80e6080744e81948604921ce4b76eb669c94cf44d921db25171d5237fbd6219fb7583832fd6c50c64d5085c843387d0ece46f109e0ab492c3799cd817acede461294b44344155de4caf7e7e086df664de673daf9334653f991c923a166d2577ff2d0f04eaeab4531c1797b0adb5ea3bf9308de1ca755cc06fdda1b8b84fa2bf3ab2de2723c893b418d14e6f91e1dbed0189c279067c499f647bf3de478fb64e4126b35bf5cbe5fc22cee9e172d5efd09b98fed4f7cfdf9fd55582257be807eea7f22395e804c6