diemeister.com

Issued by R3

About this certificate

This digital certificate with serial number 04:50:f0:3d:ee:7f:7c:92:7e:dd:88:ba:79:17:3e:5d:83:d3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=diemeister.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:50:f0:3d:ee:7f:7c:92:7e:dd:88:ba:79:17:3e:5d:83:d3
Serial Number (int): 375991069367126829649449222559763410027475
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: da:e3:49:b3:49:d6:64:58:e1:07:1d:ea:ed:34:30:c1:60:ff:27:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:76:59:40:1b:40:57:48:b1:1e:0b:81:4b:4e:75:a2:3c:82:44:51
Fingerprint (sha256): 9d:70:d8:33:87:15:86:70:ab:d9:a7:22:c6:3d:9b:94:0e:73:b4:46:68:cf:fb:df:e4:f4:88:81:e0:ef:d1:20

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate diemeister.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diemeister.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.allegiantaur.com
*.apprenantacademy.com
*.avsox1.com
*.channel11.com
*.chiledrip.club
*.coldagelli.com
*.diemeister.com
*.droidapk.com
*.examples-scam.com
*.exerciseandbrainquora.com
*.fatjackhotsprings.com
*.fibula.mk
*.fitbitversa2.com
*.ftvideos.com
*.funkfreaksrecords.com
*.goofmgle.com
*.greenrivertack.com
*.harrowinbusiness.com
*.hublaa-autoliker.com
*.hunsakersports.com
*.idstarhiphop.com
*.immuneprogram.com
*.jenspaservices.com
*.lasreligiones.com
*.launchoverlystrongtheproduct.vip
*.lovemerahjambu.co
*.makelry.co
*.makeupmama.com
*.meutudo.blog
*.morningbreak.com
*.nyanda1.com
*.outoolk.com
*.ovogg.vip
*.personalfitness.com.au
*.proxyspy.net
*.puistjes.com
*.rapide-ddl.com
*.rechargeablecartridge.com
*.rossandmathews.com
*.safeface.com
*.sewwellmaide.com.au
*.solare.cc
*.taylors-supplies.co.uk
*.taylorstreeandlandscaping.co.uk
*.themomsex.com
*.ufwhfxem.us
*.welcometounitedhealthcareonline.com
*.westernsamoa.com.au
*.wwwmint.com
*.xn--nervenrzte-wuppertal-gzb.de
allegiantaur.com
apprenantacademy.com
avsox1.com
channel11.com
chiledrip.club
coldagelli.com
diemeister.com
droidapk.com
examples-scam.com
exerciseandbrainquora.com
fatjackhotsprings.com
fibula.mk
fitbitversa2.com
ftvideos.com
funkfreaksrecords.com
goofmgle.com
greenrivertack.com
harrowinbusiness.com
hublaa-autoliker.com
hunsakersports.com
idstarhiphop.com
immuneprogram.com
jenspaservices.com
lasreligiones.com
launchoverlystrongtheproduct.vip
lovemerahjambu.co
makelry.co
makeupmama.com
meutudo.blog
morningbreak.com
nyanda1.com
outoolk.com
ovogg.vip
personalfitness.com.au
proxyspy.net
puistjes.com
rapide-ddl.com
rechargeablecartridge.com
rossandmathews.com
safeface.com
sewwellmaide.com.au
solare.cc
taylors-supplies.co.uk
taylorstreeandlandscaping.co.uk
themomsex.com
ufwhfxem.us
welcometounitedhealthcareonline.com
westernsamoa.com.au
wwwmint.com
xn--nervenrzte-wuppertal-gzb.de

Other certificates including the domain name diemeister.com

(limited to 100 certificates)
archivhot.com
banchero.com
diemeister.com
www.creci.com
diemeister.com
diemeister.com
diemeister.com
dartmouthalumni.com
diemeister.com
diemeister.com
cardinez.com
diemeister.com
diemeister.com
diemeister.com
diemeister.com

Certificate

The complete raw certificate details for diemeister.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375991069367126829649449222559763410027475
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 12:54:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 12:54:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diemeister.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740086343875674688421023217259934194929691361500045100398936058466777021722698940415686016821406590060532145680187076625702937622357469852342278594152638063021064216496950141056950995980126839875544617105213541803611784685722033258740906635510796498895267768556395752297619764461007769153175206596881878516823443500297919597029407874869020993672880066173933347316888299111974919312031576111596608278663369524165240468134964725066566032885711781667062489372875928927416986639776411422182664271690305060133562023928761267545298961377148575280168463272492962401104180025440526715775824179466874671415244977751828486283148932525597819836071437182354714503735813390518082611577025929875063313832220986212312927723287992391673099980456041503428614641727047010324547432040553585768504095468938442646675792699779788216149854365093765544374842711193969716160477951191817155442536267108174251894482362898881090157263912560884278075352287781064253544156162735859199126310256549255713313149927880881376656421925967883926263923516712655055538186818486530091302381616410578904401212327015158721561343257071530217297313978659873902535131461751507933201084836672001423376170419102370802002655605451225546472793451888376929480994419594937763578143679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dae349b349d66458e1071deaed3430c160ff27bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1980 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allegiantaur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apprenantacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avsox1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channel11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiledrip.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coldagelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diemeister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.droidapk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.examples-scam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exerciseandbrainquora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fatjackhotsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fibula.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitbitversa2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funkfreaksrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goofmgle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenrivertack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrowinbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hublaa-autoliker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hunsakersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idstarhiphop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immuneprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jenspaservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasreligiones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.launchoverlystrongtheproduct.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovemerahjambu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makelry.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makeupmama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meutudo.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morningbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyanda1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outoolk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovogg.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalfitness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proxyspy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puistjes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapide-ddl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rechargeablecartridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rossandmathews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safeface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sewwellmaide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solare.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taylors-supplies.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taylorstreeandlandscaping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themomsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ufwhfxem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welcometounitedhealthcareonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westernsamoa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nervenrzte-wuppertal-gzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegiantaur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apprenantacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avsox1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channel11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiledrip.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coldagelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diemeister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'droidapk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examples-scam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exerciseandbrainquora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatjackhotsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibula.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitbitversa2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funkfreaksrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goofmgle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenrivertack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrowinbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hublaa-autoliker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunsakersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idstarhiphop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immuneprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenspaservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasreligiones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launchoverlystrongtheproduct.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovemerahjambu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makelry.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeupmama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meutudo.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyanda1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outoolk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovogg.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalfitness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxyspy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puistjes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapide-ddl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rechargeablecartridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rossandmathews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sewwellmaide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solare.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taylors-supplies.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taylorstreeandlandscaping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themomsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufwhfxem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcometounitedhealthcareonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernsamoa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nervenrzte-wuppertal-gzb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bce1c646000000403004630440220440dc4a263e36b3ae1d761c91d21285eadcbed3c33b9aff7ed3705140e31de6202207924e29c167e242eccc9be2c906f29f0b8909a6f8c8c89b3627f02193056f5a70076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bce1c645d0000040300473045022100f397194d60a5117ef632ebdc5d19e88ed50c4467e64da476d010f5b101062a580220783b1b1c7ac1db36243cdb31ed144f92421a489b6c30b23b7e1c89e2b3b8777f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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