buffstreans.ai

Issued by R3

About this certificate

This digital certificate with serial number 04:90:19:74:0f:28:40:ae:06:24:f3:06:cc:4e:e9:d2:e2:f2 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=buffstreans.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:90:19:74:0f:28:40:ae:06:24:f3:06:cc:4e:e9:d2:e2:f2
Serial Number (int): 397483637877411626240131648679923575612146
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e5:92:95:ea:5c:7c:9a:a2:0c:3d:5b:8d:08:f0:a8:f3:66:4d:99:f7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 07:fc:15:fc:4b:e1:28:1a:29:e5:57:8a:79:97:a0:8a:bb:4b:24:5b
Fingerprint (sha256): 9d:28:ff:5b:95:2c:a9:c4:e1:2f:8e:d0:32:74:12:69:7e:f6:88:7d:0c:38:a6:e7:a4:64:27:31:ac:00:84:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate buffstreans.ai

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for buffstreans.ai

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2969d.com
*.2g9ul.xyz
*.amexgg.com
*.anikim.com
*.antiifa.com
*.atualizeidsantander.com
*.avory20.com
*.blueovalnow.com
*.bsbregistrars.com
*.buffstreans.ai
*.by-quiz.xyz
*.cleogirls.com
*.clockworksflyff.com
*.com2daddy.com
*.covidtestingmetairie.com
*.dankeeps.com
*.dead-inside.org
*.discoverprofike.com
*.draftdayconsultants.com
*.etrofashion.com
*.fanaticsjersey.com
*.fedohielo.org
*.funplus20.com
*.fzgtw.com
*.hellenic.blog
*.jackets-79110.com
*.jkssbstudyfast.com
*.kumulapps.xyz
*.lusherhomes.com
*.mercypeace.au
*.metodosdebusca.com
*.oec-togo.com
*.ogorod.pro
*.onedayrewardsdd.xyz
*.onsentipster.com
*.opiatoon.com
*.pelicanrockscafe.com.au
*.proroubux.com
*.quartoscuritiba.com
*.rythmafriq.com
*.searchvalidnews.com
*.ssfinechem.com
*.thenationexpress.com
*.topnsmarket.com
*.vehiclenews.info
*.webapps-piaypail.com
*.winnipegstreetdental.com
*.yadori21.com
*.yourwaymigrations.com
2969d.com
2g9ul.xyz
amexgg.com
anikim.com
antiifa.com
atualizeidsantander.com
avory20.com
blueovalnow.com
bsbregistrars.com
buffstreans.ai
by-quiz.xyz
cleogirls.com
clockworksflyff.com
com2daddy.com
covidtestingmetairie.com
dankeeps.com
dead-inside.org
discoverprofike.com
draftdayconsultants.com
etrofashion.com
fanaticsjersey.com
fedohielo.org
funplus20.com
fzgtw.com
hellenic.blog
jackets-79110.com
jkssbstudyfast.com
kumulapps.xyz
lusherhomes.com
mercypeace.au
metodosdebusca.com
oec-togo.com
ogorod.pro
onedayrewardsdd.xyz
onsentipster.com
opiatoon.com
pelicanrockscafe.com.au
proroubux.com
quartoscuritiba.com
rythmafriq.com
searchvalidnews.com
ssfinechem.com
thenationexpress.com
topnsmarket.com
vehiclenews.info
webapps-piaypail.com
winnipegstreetdental.com
yadori21.com
yourwaymigrations.com

Other certificates including the domain name buffstreans.ai

(limited to 100 certificates)
ntjudgments.au
buffstreans.ai
buffstreans.ai
buffstreans.ai
kino-epta.online

Certificate

The complete raw certificate details for buffstreans.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397483637877411626240131648679923575612146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 22:06:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-23 22:06:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'buffstreans.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701324534960879335481580180498269147228150131617195095183772694649374264831701576984842791553915071387626021555545875484306367996469382270920710284916520221208241874055767277604599775417778657162174137235686514016567888169350767243544330350692867400653947736863326523610346263773963450947232675088841644161817908827310711402999862773649096605322293857287863519987490106171023320160849928958942178617115383667168337933705487546679971452584766858104106377699817908802297965627583497433935242870402917205538167515806734115479547112913743501494597891297196099576202990961761036050700926545682230406004549908657627789106822950204445016580031484629727822404367215610551937567733564258809547367262387060188311648101610867779314722468603327878781977843380115713186674761465230887652742443010665215480632199463549308783682823175538239934365564299456469306271717994468748492530092162173045321214091511050317240734863724725524056845207306728630899043143490511464802736178198033035981572073065744681939580728619961495784189440149072886650707821408922809147888060046598030706944484299549034247739785116448029706766544249286108646052426156720737894144495745355569922226615937400721462700373614008507505794949954588477219984021634514043838071705397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e59295ea5c7c9aa20c3d5b8d08f0a8f3664d99f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1802 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2969d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2g9ul.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amexgg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anikim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antiifa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atualizeidsantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avory20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blueovalnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsbregistrars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buffstreans.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.by-quiz.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleogirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clockworksflyff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.com2daddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.covidtestingmetairie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dankeeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dead-inside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discoverprofike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.draftdayconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etrofashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanaticsjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fedohielo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funplus20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fzgtw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellenic.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jackets-79110.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jkssbstudyfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kumulapps.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lusherhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercypeace.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metodosdebusca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oec-togo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ogorod.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onedayrewardsdd.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onsentipster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opiatoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelicanrockscafe.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proroubux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quartoscuritiba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rythmafriq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchvalidnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssfinechem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thenationexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topnsmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vehiclenews.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webapps-piaypail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winnipegstreetdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yadori21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourwaymigrations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2969d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2g9ul.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amexgg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anikim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiifa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atualizeidsantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avory20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueovalnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsbregistrars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buffstreans.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'by-quiz.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleogirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clockworksflyff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com2daddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidtestingmetairie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dankeeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dead-inside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverprofike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draftdayconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etrofashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanaticsjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedohielo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funplus20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzgtw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellenic.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackets-79110.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jkssbstudyfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kumulapps.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lusherhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercypeace.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metodosdebusca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oec-togo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogorod.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onedayrewardsdd.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onsentipster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opiatoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelicanrockscafe.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proroubux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quartoscuritiba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rythmafriq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchvalidnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssfinechem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenationexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topnsmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehiclenews.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapps-piaypail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winnipegstreetdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yadori21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourwaymigrations.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fb201519b0000040300463044022005bd901a2f0ecc081ac78b7754de98d02fad1fe65314bd4c6d152514f3dcfab002200242bd2af00c666c42efb8d7238cff46961ff7e1de3974862350ce418244d65b00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fb201516e0000040300473045022100f68ab3f0b95a7f4fa38a194263ebb7bad4cb7a37666edb764cd719a7b0c6e3ed02200ce0f315761b827fd854f8037bed3ccf90b031df38459c5a2cffdd8e5ef0963f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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