dnamining.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0e:71:69:e0:89:b2:ee:52:12:41:b8:d7:19:51:9f:8c:4c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dnamining.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0e:71:69:e0:89:b2:ee:52:12:41:b8:d7:19:51:9f:8c:4c
Serial Number (int): 353363849372797352651614454092727653993548
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:f2:df:be:2e:45:6c:7a:41:6c:d6:fa:4a:6c:3f:1c:ea:5f:0c:8b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1d:c9:db:2d:2d:79:d6:af:c2:6e:54:32:10:c8:7b:32:68:b1:2e:82
Fingerprint (sha256): a1:92:49:4a:df:41:f5:f5:f0:37:9b:b0:54:a8:8f:23:d4:8d:63:7b:24:7b:a6:80:aa:65:89:85:b0:fa:4f:14

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dnamining.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dnamining.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.62b70ac32d4614b.com
*.acj.com.pl
*.allokhaddar.com
*.americandebt.com
*.aokirin.me
*.betadirectories.com
*.briefauftrag.com
*.bytepl.com
*.censoredbooru.org
*.cosmiccow.com
*.dalzell.net
*.dancyin.com
*.df1374.com
*.dnamining.com
*.downloadram.net
*.drawnmark.cn
*.entertainment88.site
*.eveliinalivin.com
*.familiandoandoviajando.com
*.filme-bune.info
*.florida-private-investigator-near-me.com
*.game-one.online
*.hastings.com.au
*.hayvaomua.com
*.httpvimeo.com
*.independentrealestateagents.com.au
*.kopkeluargakaribon.com
*.kuppipaal.com
*.malioficial.com
*.medicationreviews.au
*.moonkissed.com
*.mortgagecomparisons.com.au
*.mrcnn.com
*.multimediape.com
*.myhomestoreshop.com
*.oacottawa.org
*.oneoneslot2.com
*.patriciarceasar.me
*.reviewmyservice.com.au
*.saint-michel.com
*.ssoap2day.org
*.stonehold.com
*.streaminghd-serie.com
*.teinipillut.com
*.toplogo.info
*.unlockingcms.com
*.victoryfinance.co
*.vilchez.com
*.voody.com
*.zeinh.com
62b70ac32d4614b.com
acj.com.pl
allokhaddar.com
americandebt.com
aokirin.me
betadirectories.com
briefauftrag.com
bytepl.com
censoredbooru.org
cosmiccow.com
dalzell.net
dancyin.com
df1374.com
dnamining.com
downloadram.net
drawnmark.cn
entertainment88.site
eveliinalivin.com
familiandoandoviajando.com
filme-bune.info
florida-private-investigator-near-me.com
game-one.online
hastings.com.au
hayvaomua.com
httpvimeo.com
independentrealestateagents.com.au
kopkeluargakaribon.com
kuppipaal.com
malioficial.com
medicationreviews.au
moonkissed.com
mortgagecomparisons.com.au
mrcnn.com
multimediape.com
myhomestoreshop.com
oacottawa.org
oneoneslot2.com
patriciarceasar.me
reviewmyservice.com.au
saint-michel.com
ssoap2day.org
stonehold.com
streaminghd-serie.com
teinipillut.com
toplogo.info
unlockingcms.com
victoryfinance.co
vilchez.com
voody.com
zeinh.com

Other certificates including the domain name dnamining.com

(limited to 100 certificates)
dnamining.com
dnamining.com
falconcorporateadvisory.com
medicaliot.com
unncommongoods.com
zakaa.com
controlmypc.com
dnamining.com
dnamining.com
amcommunications.com
dnamining.com
op012.com

Certificate

The complete raw certificate details for dnamining.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353363849372797352651614454092727653993548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 08:29:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 08:28:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dnamining.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872341607818119920653398554097504533801724201457802952099616398558908265781954744541362611306614479835698900602311245432410711976744963076628921501046807069684681750274188707336635945125689386587985862954737516084742614779257735712611280916807631302156761963981602839926527818448651651006876242646156113864786852054008470586997559629912284991354804459333552281690182497696106589343855611836457734492413843241872733271526046416001206270154760615557146927094387935176495007891567792493926699742007204665006973395440008231701745023382074961918039426093765499540044348941650951538384857301926492120342741697770935291288581892728411345398184049457653759684595077605736278262049782233526814249454227559638436582955334766538958938224527708473704451075057576291629938353189388248605176470424217756587599265044842844314820444372648449707627424775454114816882064382070669052082079164328401941784640268370678944132467779685660741738288035856105657507238173373686071291211533669201451156729180233970407684562967444541182095683009287158791631421395771129314786883603218311525220076431062294226411301650433129041965420537314152225071692481670183782775344502954318532352617500768926370555889632391613465804235382693323024050730985615269553801660533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2f2dfbe2e456c7a416cd6fa4a6c3f1cea5f0c8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1902 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.62b70ac32d4614b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acj.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allokhaddar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americandebt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aokirin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betadirectories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briefauftrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bytepl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.censoredbooru.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmiccow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dalzell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dancyin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.df1374.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnamining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downloadram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drawnmark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entertainment88.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eveliinalivin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familiandoandoviajando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filme-bune.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.florida-private-investigator-near-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.game-one.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hastings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hayvaomua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.httpvimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independentrealestateagents.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kopkeluargakaribon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuppipaal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malioficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicationreviews.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moonkissed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgagecomparisons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrcnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multimediape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhomestoreshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oacottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneoneslot2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patriciarceasar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reviewmyservice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saint-michel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssoap2day.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stonehold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaminghd-serie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teinipillut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toplogo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unlockingcms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victoryfinance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vilchez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '62b70ac32d4614b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acj.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allokhaddar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americandebt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aokirin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betadirectories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefauftrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bytepl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'censoredbooru.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmiccow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalzell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancyin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'df1374.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnamining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drawnmark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainment88.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eveliinalivin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familiandoandoviajando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filme-bune.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florida-private-investigator-near-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game-one.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayvaomua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httpvimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independentrealestateagents.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kopkeluargakaribon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuppipaal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malioficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicationreviews.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonkissed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagecomparisons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrcnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimediape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhomestoreshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneoneslot2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriciarceasar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviewmyservice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-michel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssoap2day.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonehold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streaminghd-serie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teinipillut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toplogo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlockingcms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoryfinance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vilchez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeinh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ddf98aafe0000040300473045022100f2d8ca71b3fcc64f534f57bab5341610aa9818d009e8b51a05db378d35161d9c02207e7f1d12d465fc613aa7922815d0a348e5e43569b6a36d2f22b6d7120379aa7a007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ddf98ab0a0000040300473045022064bd9286759216cca3dcfa845a0b8681379d1b3e5e97c374ddde09706849f5a9022100936d580fa5e459f2ae59a4bfe72d3738bc0f9eae15e99d5e9d35a270bc88c243
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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