exten.com

Issued by R3

About this certificate

This digital certificate with serial number 03:95:e7:c7:5d:fb:fb:06:a5:73:2e:9d:fa:fc:36:58:ff:73 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=exten.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:e7:c7:5d:fb:fb:06:a5:73:2e:9d:fa:fc:36:58:ff:73
Serial Number (int): 312347017306829785696274349836550891175795
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:b0:0a:8c:c5:3a:88:7c:7e:a3:71:63:2d:6a:dd:82:92:28:af:8c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:c6:ee:78:97:14:8e:6f:5b:94:56:ac:a4:59:13:17:56:1d:14:b4
Fingerprint (sha256): a3:8c:14:3c:9e:77:ab:0d:b3:aa:50:b9:00:f4:2e:43:b5:a6:d1:24:b4:8e:1b:b6:d1:83:97:a3:2e:6d:47:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate exten.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exten.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.americanpies.com
*.aviara.ro
*.deverestudies.org
*.digiphotogulf.com
*.earthinstitution.com
*.easy-iphone-unlocking.com
*.ecapital.com.au
*.edeals.com.au
*.esaliexpress.com
*.exten.com
*.fearsome.com
*.geochaching.com
*.godzillagames.com
*.henrysauction.com
*.hotvacations.com
*.jp8800zz.net
*.krproxy.com
*.lagosgolf.com
*.landingharbor.com
*.letmejerk.co
*.lmarriott.com
*.maladot.com
*.marthasweart.com
*.maximodutti.com
*.meucabelonatural.com
*.mondowatours.com
*.mydoterre.com
*.myllcagreement.com
*.mymcad.com
*.myscconfession.com
*.mysdhc.com
*.naughtyameroca.com
*.oemainfinancial.com
*.oldxv.com
*.pansonic.com
*.passionatesex.com
*.radarrmusicvideos.com
*.slaack.com
*.smokeless.com.au
*.spareone.com
*.spartina499.com
*.stainlessstove.com
*.straighttslk.com
*.usurio.us
*.wwwconcursolutions.com
*.xfinityl.com
*.xvideoshentai.site
*.yassalam.com
*.zdecyduj.online
*.zeenew.com
americanpies.com
aviara.ro
deverestudies.org
digiphotogulf.com
earthinstitution.com
easy-iphone-unlocking.com
ecapital.com.au
edeals.com.au
esaliexpress.com
exten.com
fearsome.com
geochaching.com
godzillagames.com
henrysauction.com
hotvacations.com
jp8800zz.net
krproxy.com
lagosgolf.com
landingharbor.com
letmejerk.co
lmarriott.com
maladot.com
marthasweart.com
maximodutti.com
meucabelonatural.com
mondowatours.com
mydoterre.com
myllcagreement.com
mymcad.com
myscconfession.com
mysdhc.com
naughtyameroca.com
oemainfinancial.com
oldxv.com
pansonic.com
passionatesex.com
radarrmusicvideos.com
slaack.com
smokeless.com.au
spareone.com
spartina499.com
stainlessstove.com
straighttslk.com
usurio.us
wwwconcursolutions.com
xfinityl.com
xvideoshentai.site
yassalam.com
zdecyduj.online
zeenew.com

Other certificates including the domain name exten.com

(limited to 100 certificates)
migas.com
hfdcbank.com
jeffersvet.com
isagnix.com
loan4me.com
notonthehigghstreet.com
exten.com
totlawireless.com
carfoesale.com
bluerays.com
lemnet.com
bluerays.com
nasu-proposemuseum.com
mysdhc.com

Certificate

The complete raw certificate details for exten.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312347017306829785696274349836550891175795
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 10:20:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 10:20:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exten.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 634472061173562786802324314976852145332807624672498076598117191253581801372486935579570493544213177590654932526609837240148090740643509956018530770967049359422400194094184651588693101634489520229939968088712080093269943182525199277165432242835406001857002682929297696549814307696267880111854455982878199522088638069031946229544356414673035694980787017744337090124445065374640403902641321029318836425159781475332483451485090352473042664452463847817479197633706369951595509818796738241634528680371828874316470531740932280575710451484107980760091055672545206015219582565254561139432732994096904145363805312494795130206053247111602393715414906791068946434602752680032743691523102710975691608381006501205778775323286316542521979384346729426554362573829749575766653124811034878683569787327202625074308145038844549998712317495512261894798023650143517886048337734526355303085994466776918958932116861167724664007962096073391197171585042624613748162013281583229418725149976892462629313275043177208147689131742801625767135399101731482637492611647082427173978592354729392192540159000302986760548214669944504168483550164043172893298417461978056543241978859449287985427565448036055622809071722251266063813802031761525370995926963171328291209423801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99b00a8cc53a887c7ea371632d6add829228af8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1784 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanpies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviara.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deverestudies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digiphotogulf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earthinstitution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easy-iphone-unlocking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecapital.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esaliexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fearsome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geochaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godzillagames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.henrysauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotvacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jp8800zz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krproxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagosgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landingharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.letmejerk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lmarriott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maladot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marthasweart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maximodutti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meucabelonatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mondowatours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydoterre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myllcagreement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymcad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myscconfession.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysdhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naughtyameroca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oemainfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oldxv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pansonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passionatesex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radarrmusicvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slaack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smokeless.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spareone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spartina499.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stainlessstove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.straighttslk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usurio.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwconcursolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfinityl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xvideoshentai.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yassalam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zdecyduj.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeenew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanpies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviara.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deverestudies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiphotogulf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthinstitution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy-iphone-unlocking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecapital.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esaliexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fearsome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geochaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godzillagames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henrysauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotvacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp8800zz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krproxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagosgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landingharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letmejerk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmarriott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maladot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marthasweart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maximodutti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meucabelonatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondowatours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydoterre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myllcagreement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymcad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myscconfession.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysdhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naughtyameroca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oemainfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldxv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pansonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passionatesex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radarrmusicvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slaack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smokeless.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spareone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spartina499.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stainlessstove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straighttslk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usurio.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwconcursolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfinityl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xvideoshentai.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yassalam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdecyduj.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeenew.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ce3a73fef0000040300473045022100cc3f73a551decdd809fe4b3194a24f0ef2ccdbe44284a175baccc0c7a0931fbc02203960d798c1a8917e2b896f47ba5a8717b717da8aae1efd11c3318e28bf134b36007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ce3a73fe80000040300463044022030386eb2aed94570deebaeba4790b2a66ec895fe8065785c8632bba93ac55b9602205c0839fef5deddc19e55b420546990c259ca2697ad8330adf07260cb392a738c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005432f13df0033d93395a363d39a1ebde5cf835d27efc3dcb04ebda45626bc8e03083c46a9ffbc11ae1dff5d4389c00ae062670caf0e51a37e7fbd5f97cf43ae1c5323baba6a21a95289d596f3de2a737bf606a4b813d600ea7677514e043b3b5c70fc22a03b9a82b710d35d91cba7ecf2ed4e0e4c6752acfc29f87be6edb716f0a0af70ec08501c102d36c3ded116b76209c723228931f30e15a5070710bff537f878e1ed6407c72fe3f6aa9897b17a02a792e3e9fc0a2c58de316679f1549bb2390e8c01c0a3e88eb1c9eef7356f3cab33f680a1f7e439c6ff57fcc40056f737baa39e5db7c33eaefa240d40fd7935872207682dc7487d4016dc5d69b957a73