bgiar.com

Issued by R3

About this certificate

This digital certificate with serial number 03:84:48:f0:8a:4a:6a:0d:1e:d3:8f:28:63:1c:95:74:e3:e5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bgiar.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:84:48:f0:8a:4a:6a:0d:1e:d3:8f:28:63:1c:95:74:e3:e5
Serial Number (int): 306351083600655410021153438259720597332965
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 16:c2:67:4a:1c:0a:d9:a7:d4:ab:63:ad:d2:5f:fd:37:b3:de:9f:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9b:bd:0e:98:5f:9e:77:88:79:1e:26:e7:a4:6a:97:fd:76:31:f4:07
Fingerprint (sha256): 9e:2e:28:e4:0f:34:31:93:d6:25:af:17:c4:7f:b9:53:68:26:c8:15:a5:9f:4a:61:84:83:de:ae:1d:aa:f9:73

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bgiar.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bgiar.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agropol.cz
*.all-vulvas-are-beutiful.com
*.anglefeet.com
*.antiqua.com.br
*.asterousia.com
*.asx2.com.au
*.atheist.com.au
*.bgiar.com
*.bitli.us
*.bushfood.com.au
*.connectivity-fixer.com
*.consettrugby.com
*.cosmeticdentures.com.au
*.cuspgroupmall.com
*.daby.net
*.epiquegame.com
*.escri-sa.com.au
*.evenementsentreelles.com
*.examines.net
*.fastkreditlan.com
*.fda-us.com
*.freeiphoner.com
*.gardenhose.de
*.hadshop.de
*.hb-artist.com
*.hywm6.com
*.jongerennet.be
*.kleinanzeigen.software
*.lamielfactory.com
*.megaupload-france.com
*.musicrx.us
*.newshugama.com
*.nicheparada.com
*.nuumoble.com
*.onseconait.com
*.patkslc.com
*.purestrengthband.com
*.radiatorcaps.com.au
*.removal.co.za
*.serialuhd.net
*.simayrooz.com
*.spainsportsbetting.com
*.sykscanner.de
*.thestreaeast.cc
*.thstreameast.cc
*.verzionfios.com
*.vipleague.lv
*.voituredesiles.com
*.xn--hmopathie-07ab.de
*.xn--schnheitsrzte-jfb7x.de
agropol.cz
all-vulvas-are-beutiful.com
anglefeet.com
antiqua.com.br
asterousia.com
asx2.com.au
atheist.com.au
bgiar.com
bitli.us
bushfood.com.au
connectivity-fixer.com
consettrugby.com
cosmeticdentures.com.au
cuspgroupmall.com
daby.net
epiquegame.com
escri-sa.com.au
evenementsentreelles.com
examines.net
fastkreditlan.com
fda-us.com
freeiphoner.com
gardenhose.de
hadshop.de
hb-artist.com
hywm6.com
jongerennet.be
kleinanzeigen.software
lamielfactory.com
megaupload-france.com
musicrx.us
newshugama.com
nicheparada.com
nuumoble.com
onseconait.com
patkslc.com
purestrengthband.com
radiatorcaps.com.au
removal.co.za
serialuhd.net
simayrooz.com
spainsportsbetting.com
sykscanner.de
thestreaeast.cc
thstreameast.cc
verzionfios.com
vipleague.lv
voituredesiles.com
xn--hmopathie-07ab.de
xn--schnheitsrzte-jfb7x.de

Other certificates including the domain name bgiar.com

(limited to 100 certificates)
freundschaftsgedicht.de
radiatorcaps.com.au
bgiar.com
casplayercam.com
radiatorcaps.com.au
radiatorcaps.com.au
bgiar.com
radiatorcaps.com.au
bgiar.com

Certificate

The complete raw certificate details for bgiar.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306351083600655410021153438259720597332965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 06:09:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-30 06:09:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bgiar.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 844362962854271324758571511399372594457839328052760786446564793340685299828491039008292844897232809473668790034237967746105806638014294025795195303159256624316420895135659098928366826415096010588303794042167613062413603331736089885073914373620212102903391770012097554229989375823502440473770087629667576416851983151227227006279219985321953881546858010152478324467913336130208559619677753242652277039130536414799134946202354979954424122110355292894440972358721873124707002028672417267283757676855421174621561573156462312593588738992534056104544192889840321977321406133946613002084763326652789315421203305829769600221153974505238152423840267244706886741656964624092220166618628240629125746932388034665339682948958457345590078982158035393462625761049647425849126698661335683311080285100629789897213385343355669292003220149193390281685573125420947589863299929030636223378892631366310962162642821766126091602474009479590421202925860012416373667725136727029669306710794905154481728898609308411835470482810825837863462664438262859912193165943067642577253908761622631644732411001790141836457770529454446874236749396729881441158797662162104112310785686301758594373486232145236400213723780638878513737749281072597263852311266181192645224536061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16c2674a1c0ad9a7d4ab63add25ffd37b3de9f2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.all-vulvas-are-beutiful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anglefeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antiqua.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asterousia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asx2.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atheist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bgiar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitli.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bushfood.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectivity-fixer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consettrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmeticdentures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuspgroupmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daby.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epiquegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escri-sa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evenementsentreelles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.examines.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastkreditlan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fda-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeiphoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gardenhose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hadshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hb-artist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hywm6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jongerennet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleinanzeigen.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamielfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megaupload-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicrx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newshugama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicheparada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuumoble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onseconait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patkslc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purestrengthband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radiatorcaps.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.removal.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serialuhd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simayrooz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spainsportsbetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sykscanner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thestreaeast.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thstreameast.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verzionfios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipleague.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voituredesiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hmopathie-07ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schnheitsrzte-jfb7x.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'all-vulvas-are-beutiful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anglefeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiqua.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asterousia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asx2.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atheist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgiar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitli.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushfood.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectivity-fixer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consettrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmeticdentures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuspgroupmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daby.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiquegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escri-sa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evenementsentreelles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examines.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastkreditlan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fda-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeiphoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardenhose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hadshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hb-artist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hywm6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jongerennet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleinanzeigen.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamielfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megaupload-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicrx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newshugama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicheparada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuumoble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onseconait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patkslc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purestrengthband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiatorcaps.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'removal.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serialuhd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simayrooz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spainsportsbetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sykscanner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestreaeast.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thstreameast.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verzionfios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipleague.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voituredesiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hmopathie-07ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schnheitsrzte-jfb7x.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fd2a219930000040300473045022001be59e602a9db7cf24aed24c756319b97fd2f6bf10ebe74a4cd01e213c7dffb02210094f60b4d099be057cd600cce78e5975478a2844a1a72b72fe623f33ea5160bc30077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fd2a219c00000040300483046022100b02d355938442e3df8a28f001a15a9e11f77fef4823b06b07aa60ac9a1eee93c022100b16a1f38248e4e0dfdefdb5e473bf5d1bd87fa4b3994ad3a4411ddf4bec3f5e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005e70668133eeeaa2894265fc47dec1c8e2dccd9fac454ca475a0444d72e60418376d816c026150dfe0d36a28883c80b205f8d1ac12c2d5c08ed719813f161ddc2eacdf4ad90ed82efd4cf780969968d39ca97c850882e944c39d6d924ea0b5564c5e22d0a4af0deaf5e58b1224a7492810fea60b94c8212ceecdd3da80dcca01ce0ae410cf933cdbfd29cf09b9ee93158ea0e9a68bc32a1eb17b8133d717313da0792d24656ff287406f908f4cc871baa5e14f9f3d8e4ab9391cf197335ce417a109898d20ed076e1edfc04b0b80002b6b9894146d369f220992caf59b38df6b59223d4ad477ae86f8b07c60159f2e327de447a875e4542ce6fec6bcadb18f12