rockzi.com

Issued by R3

About this certificate

This digital certificate with serial number 04:61:7f:5d:52:9a:2d:a8:27:3b:5d:35:8b:a6:2b:74:8a:89 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rockzi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:61:7f:5d:52:9a:2d:a8:27:3b:5d:35:8b:a6:2b:74:8a:89
Serial Number (int): 381625829832817400234151877462930855594633
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 79:ec:2f:8e:6d:93:67:7b:ff:f5:d2:c1:1c:38:d2:18:b0:92:f6:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:57:2b:99:fd:31:d8:ed:ee:05:d1:62:cc:5f:de:85:b3:3d:55:08
Fingerprint (sha256): 9b:a1:60:15:2b:6e:33:5b:ba:3d:c7:d7:1a:7e:86:44:f6:52:38:69:d3:5a:c3:4e:8a:64:c8:04:7f:22:1d:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate rockzi.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rockzi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.309fk.com
*.8xvk.com
*.altiparmakshop.net
*.arejet.com
*.bankfiancial.com
*.beachclubcafe.com
*.bloggingnetwork.co.uk
*.bpys.xyz
*.camerabags.au
*.ccml.us
*.cla-chauffeur.com
*.dewaslot.cc
*.embarktoexplore.com
*.eurochems.eu
*.faraasr.com
*.flutter25.com
*.free799.com
*.ghirex.com
*.giasbiscotti.com
*.gobysea.com.au
*.hindihints.com
*.hqqtqcoexxsiv.com
*.joker123e.net
*.kycloudvp.com
*.l9cq.com
*.labo-of.com
*.latestentertainement.com
*.lesdelicesdeoumi.com
*.luoli95.com
*.mindchampsfrenchsforest.com.au
*.moviesad.com
*.onlienstudienzentrum.de
*.overnetworld.com
*.plaguewood.com
*.rincondelibros.com
*.rjr.de
*.rockzi.com
*.roypizza.com
*.sadpandaproductions.com
*.sanopass.io
*.saradaniele.com
*.sex141.hk
*.shopnicolesassaman.com
*.svitatp.org
*.tryimagic.com
*.twinder.xyz
*.wnmiaomu.com
*.xl565.com
*.xn--truck-zubehr-fjb.de
*.yiju.info
309fk.com
8xvk.com
altiparmakshop.net
arejet.com
bankfiancial.com
beachclubcafe.com
bloggingnetwork.co.uk
bpys.xyz
camerabags.au
ccml.us
cla-chauffeur.com
dewaslot.cc
embarktoexplore.com
eurochems.eu
faraasr.com
flutter25.com
free799.com
ghirex.com
giasbiscotti.com
gobysea.com.au
hindihints.com
hqqtqcoexxsiv.com
joker123e.net
kycloudvp.com
l9cq.com
labo-of.com
latestentertainement.com
lesdelicesdeoumi.com
luoli95.com
mindchampsfrenchsforest.com.au
moviesad.com
onlienstudienzentrum.de
overnetworld.com
plaguewood.com
rincondelibros.com
rjr.de
rockzi.com
roypizza.com
sadpandaproductions.com
sanopass.io
saradaniele.com
sex141.hk
shopnicolesassaman.com
svitatp.org
tryimagic.com
twinder.xyz
wnmiaomu.com
xl565.com
xn--truck-zubehr-fjb.de
yiju.info

Other certificates including the domain name rockzi.com

(limited to 100 certificates)
sni45539.cloudflaressl.com
ssl2583.cloudflare.com
thematerialgirl.co
ssl2583.cloudflare.com
ssl2583.cloudflare.com
*.rockzi.com
sni45539.cloudflaressl.com
rule24.us
sni45539.cloudflaressl.com
sni45539.cloudflaressl.com
sni45539.cloudflaressl.com
ssl2583.cloudflare.com
sni45539.cloudflaressl.com
ssl2583.cloudflare.com
sni45539.cloudflaressl.com
sni45539.cloudflaressl.com
sni45539.cloudflaressl.com
ssl2583.cloudflare.com
sni45539.cloudflaressl.com
tillamookbay.cc
sni45539.cloudflaressl.com
ssl2583.cloudflare.com
sni45539.cloudflaressl.com
rockzi.com
thematerialgirl.co
ssl2583.cloudflare.com
indotsushin.com
sni45539.cloudflaressl.com
babajan.com.au
ssl2583.cloudflare.com
ssl2583.cloudflare.com
ssl2583.cloudflare.com
ssl2583.cloudflare.com
ssl2583.cloudflare.com
*.8xvk.com
ssl2583.cloudflare.com
freespeechtime.net
ssl2583.cloudflare.com
sni45539.cloudflaressl.com
ssl2583.cloudflare.com
ssl2583.cloudflare.com
indotsushin.com
sni45539.cloudflaressl.com
sni45539.cloudflaressl.com
sni45539.cloudflaressl.com

Certificate

The complete raw certificate details for rockzi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3PN7kvaqBN6zg9Ii4M4K
TpcNC6m/Cg5rnU70yGEy5vfJFaF7pRd0v2DeHpX7MeJDXeXgfXoeszY2V6Wf7X5o
Bd4zoCSsnEZXhP6Pxl6tUGZrDrhCDEpJXyUJnO87bqdfTwpfJ1n+BR+ENvqAwhBx
ri87Hb1LdXtebhrpSC/8XyD/oHA3UEVnmm1GB9JuVm/MALLi6hNx37pKz4zJ/bRQ
uLA0bAHcNFmc0hdSvp8tFC2oJt+RhiZV7o8jmmmLB+0P9i2r4bT2Sbffq/RucF7h
hk7ZnA48Srci/gKU32y+fLCC+Sfno7vXkx+Ef+RSA8B7/bzQ2Fn0GQIgr09Xv/4d
GLF8PAGzKDcZPYJa1EtPgs+ifku5fuS17i4YLEOFZUFKZtlwRcA3aKQHCPuTvqO5
GDvYEuTuzsfb43CMWljQF3zytGeIlTnwoLeW5HbdIfuQF7TR8pddAgnqfFn+vA6Y
URIkjt4V5GYn0nOst8nZHrIoicYYp3H+mvfq2NYy1fUfdrEphTunKr3H1a/TzJbk
jX7u9tKYxIx5OduXnXn85vV7W210K3gfjLmDptqPJ7xMHXiEucrI+KCxCWlGP4K9
w0V5u+JY7uEMx0NZL70PfQWNv97CsdhXg2o8Pr0/R9zpLe6nkk5G5m3nB+419CGn
h8lp061aq4XI57Z+9/ZRwR8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381625829832817400234151877462930855594633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 03:13:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 03:13:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rockzi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 901401862146293142898975095748474104488581156064402848407377222956748659306284806723378410595854442936192375425746080842854020062885184742980662903023478683020893667942250209116337055373743780883941581370749433361452143171856053415520896376057512604758570270001866522868200688556859676349369040971908485039057253567250829472688983663827738498832679099499004283521856655089601512508137264695323485382575244032771774930232476550985058257634317332405823920493970457212462868675779539138419831200499732933053739824513887476420264550185143295648717877709493276547183507037447926888347560375067482920383419520993196506509153566834078363656655944159031944128608464423412714704112493540664427264411284847156172810588248179888712711454521186756249966070740764119561328305691874658263150821198204162763119643842138878290062394958044498508556832415143003654992607891798672194613330947178875121583099019491076974422022887143900760268459318311199409753636882328106087255644065815306576871404320842714951728451115897083989650213005120483058686315044992308787083792376305197594423723395139202158311328819410471084047742013730817392877083494815527304435463072568825899331711291655259184509464289086588931116925495688302766767443126687512836619485471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79ec2f8e6d93677bfff5d2c11c38d218b092f62a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1706 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.309fk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8xvk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altiparmakshop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankfiancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beachclubcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloggingnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bpys.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camerabags.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccml.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cla-chauffeur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dewaslot.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.embarktoexplore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurochems.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faraasr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flutter25.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.free799.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghirex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giasbiscotti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobysea.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hindihints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqqtqcoexxsiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joker123e.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kycloudvp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.l9cq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labo-of.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latestentertainement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesdelicesdeoumi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luoli95.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindchampsfrenchsforest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviesad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlienstudienzentrum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overnetworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plaguewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rincondelibros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rjr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roypizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sadpandaproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanopass.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saradaniele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sex141.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopnicolesassaman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svitatp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tryimagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twinder.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wnmiaomu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xl565.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--truck-zubehr-fjb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yiju.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '309fk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8xvk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altiparmakshop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankfiancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachclubcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloggingnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpys.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camerabags.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccml.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cla-chauffeur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewaslot.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embarktoexplore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurochems.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faraasr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flutter25.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'free799.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghirex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giasbiscotti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobysea.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hindihints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqqtqcoexxsiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123e.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kycloudvp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l9cq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labo-of.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latestentertainement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesdelicesdeoumi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luoli95.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindchampsfrenchsforest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlienstudienzentrum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overnetworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plaguewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rincondelibros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roypizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadpandaproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanopass.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saradaniele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sex141.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopnicolesassaman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svitatp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tryimagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinder.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnmiaomu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xl565.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--truck-zubehr-fjb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yiju.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018af8e42540000004030048304602210086aa08a3376aa4399359d544d113a5d864adcd307fe909e27e7b3f017ad68483022100a2f2ae3a67db2702a0d01dc0a7a6da1c7352cb157a0623c3afd119ace6f5e204007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018af8e425490000040300483046022100bfe1022f2dd9e439699ec63fda5d2602e92573ce9e0b874264e22843f3fac2d6022100a5676d0fffa710a845b7de583b42a1c3008e8d830446b8635af9ab31155b92c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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