offenda.com

Issued by R3

About this certificate

This digital certificate with serial number 03:14:3a:9f:c9:ab:b4:3a:5f:90:b9:ea:0a:8f:ad:d0:d8:78 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=offenda.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:3a:9f:c9:ab:b4:3a:5f:90:b9:ea:0a:8f:ad:d0:d8:78
Serial Number (int): 268220430023023665362045428068286324594808
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:60:b9:c8:c0:57:ee:39:fd:78:41:ac:83:2d:27:50:c4:b8:ec:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:88:c4:03:f2:d5:08:de:d4:75:d2:3f:9c:43:b7:71:43:0a:bc:2e
Fingerprint (sha256): 9e:83:d4:65:20:5c:65:d3:e2:0b:92:1e:f6:0b:b4:82:71:3f:9e:6a:70:93:53:10:24:c0:45:6e:47:2a:46:50

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate offenda.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for offenda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1hgirl.com
*.addobe.com
*.aliexpe.com
*.ascentas.com
*.batdoc.com
*.bushhaven.com.au
*.chorac.com
*.cirquedusoleil.uk
*.clintonfund.com
*.desirulez.us
*.ecologicallyproduced.com
*.educacioilestic.com
*.emplloyeenavigator.com
*.femdomvip.com
*.fluidstatus.com
*.gaminformer.com
*.gitllab.com
*.graybird.com
*.greytrip.com
*.hiddenjulesrabbitry.com
*.htfashion.co.uk
*.imsatv.com
*.krantekoppen.be
*.majestadeofertas.com
*.mccormickrealestate.com
*.mekimeki.info
*.metrorail.com.au
*.microsofhup.com
*.mortgagerescue.com.au
*.offenda.com
*.originplaza.top
*.pathsguitarflash.com.br
*.pizzatimeshipley.com
*.portonvpn.com
*.reappraisers.com
*.relyspeak.top
*.risveglio.com
*.surfdome.uk
*.synasset.com
*.thinxbig.co.uk
*.vituvia.com
*.wallicaes.com
*.wrongtown.com
*.xfinitystreamapp.com
*.xiaoyufan.com
*.xn--blutviskositt-mfb.de
*.xn--deklaratives-gedchtnis-g5b.de
*.xn--diagnoseschlssel-krankheiten-d7c.de
*.zabarsky.com
*.zjz041.top
1hgirl.com
addobe.com
aliexpe.com
ascentas.com
batdoc.com
bushhaven.com.au
chorac.com
cirquedusoleil.uk
clintonfund.com
desirulez.us
ecologicallyproduced.com
educacioilestic.com
emplloyeenavigator.com
femdomvip.com
fluidstatus.com
gaminformer.com
gitllab.com
graybird.com
greytrip.com
hiddenjulesrabbitry.com
htfashion.co.uk
imsatv.com
krantekoppen.be
majestadeofertas.com
mccormickrealestate.com
mekimeki.info
metrorail.com.au
microsofhup.com
mortgagerescue.com.au
offenda.com
originplaza.top
pathsguitarflash.com.br
pizzatimeshipley.com
portonvpn.com
reappraisers.com
relyspeak.top
risveglio.com
surfdome.uk
synasset.com
thinxbig.co.uk
vituvia.com
wallicaes.com
wrongtown.com
xfinitystreamapp.com
xiaoyufan.com
xn--blutviskositt-mfb.de
xn--deklaratives-gedchtnis-g5b.de
xn--diagnoseschlssel-krankheiten-d7c.de
zabarsky.com
zjz041.top

Other certificates including the domain name offenda.com

(limited to 100 certificates)
offenda.com
offenda.com
offenda.com
offenda.com
theaddictions.org
keshishyan.com
offenda.com
smartpackage.buzz
offenda.com
offenda.com
shemalefetish.com
offenda.com
norplant72.com
tefillah.com
offenda.com
offenda.com

Certificate

The complete raw certificate details for offenda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268220430023023665362045428068286324594808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 12:25:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 12:25:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'offenda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716013583325969039838943602117908190061252446934439777963500422610770525599148378460593612983284140433663193880319307311979325943012847024391600634958703808482865796847195435523488078490645838365047613464470865457903074707358999245559963761174841395329579395614550546634053421952322593464028462847706000184405311142919559888373381610967273617526878675359353346562990760312736272504348830474408854074569167647856029243183877809021848095919723004167463142542868065206608822060089690089873581870370866156276637980596712771509371033304062927854402872783878586184863051588631107210102524221895839863166044365172567288648858427152112056353719036000190688424613519755971002028326187536102666265243191180550033745438485786055694056909197945474029712078930170688647841455058546989226743892987186732523099815808451632647189851676593777213035189721395780552369455049387279846030321538410692784702740041364098570753899095798222793751846538342219015238324111294273915818044075669758299995983289620127706629572530526047184403737246199627560048747970380966372225457621134692929064073887409270039411712652513747931659901104091535872486135015581608326892277177401648305243954128795528814382139245491277051160069007866412744141044703055674994434115647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9060b9c8c057ee39fd7841ac832d2750c4b8ece6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1876 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1hgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aliexpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ascentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bushhaven.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chorac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cirquedusoleil.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clintonfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desirulez.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecologicallyproduced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educacioilestic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emplloyeenavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femdomvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fluidstatus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaminformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gitllab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graybird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greytrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiddenjulesrabbitry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htfashion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imsatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krantekoppen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.majestadeofertas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mccormickrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mekimeki.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrorail.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microsofhup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgagerescue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.originplaza.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathsguitarflash.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pizzatimeshipley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portonvpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reappraisers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relyspeak.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risveglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surfdome.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thinxbig.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vituvia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wallicaes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrongtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfinitystreamapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiaoyufan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--blutviskositt-mfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--deklaratives-gedchtnis-g5b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--diagnoseschlssel-krankheiten-d7c.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zabarsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zjz041.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1hgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliexpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushhaven.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chorac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cirquedusoleil.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clintonfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desirulez.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecologicallyproduced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educacioilestic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emplloyeenavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femdomvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidstatus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaminformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitllab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graybird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greytrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiddenjulesrabbitry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htfashion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imsatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krantekoppen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'majestadeofertas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccormickrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mekimeki.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrorail.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsofhup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagerescue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originplaza.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathsguitarflash.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizzatimeshipley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portonvpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reappraisers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relyspeak.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risveglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfdome.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinxbig.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vituvia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallicaes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrongtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfinitystreamapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiaoyufan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--blutviskositt-mfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--deklaratives-gedchtnis-g5b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--diagnoseschlssel-krankheiten-d7c.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zabarsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zjz041.top'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e37fd80030000040300483046022100c7a5b356b6a61dff0266f14cdf3f2211b13e16901290f1ce7a2433b0a9dd825e022100ee90a30efd1806c285457a40f8970fd49f3188788a367a462045c84a1ca8f148007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e37fd7ffe000004030046304402207eff27f625339d5fe22f948fe47b315c479908dfdf979d741ec68a3c609ab562022051942e65c518f21a93bc3854d20bed24d0c59da2a2368b677c5d3f677fd91764
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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