kiwivapor.co

Issued by R3

About this certificate

This digital certificate with serial number 04:54:62:34:b6:83:9a:4e:b0:2f:bc:c9:85:ec:20:d8:45:ab was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kiwivapor.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:62:34:b6:83:9a:4e:b0:2f:bc:c9:85:ec:20:d8:45:ab
Serial Number (int): 377163400593248576057716485684849572070827
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6a:ef:0d:d0:68:8c:fa:ec:44:a7:ea:38:d3:34:ad:2d:a5:64:67:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:ce:35:65:f7:d7:3a:04:29:f2:f3:47:20:33:90:84:96:e4:bf:c8
Fingerprint (sha256): a4:68:aa:00:72:13:5a:a1:1a:e5:28:84:89:93:84:7b:54:38:8e:5f:8e:7b:84:4d:aa:f9:fb:0e:65:f6:6f:97

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kiwivapor.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiwivapor.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abmsusa.com
*.altadefinizione.zone
*.applab.au
*.bbestbuy.ca
*.bd82f8o6xmiwv5vj.us
*.botroulette.site
*.callpanel.biz
*.candyhub.online
*.cisefad.org
*.colabs.asia
*.criptomestre.com
*.dekalbcountyga.us
*.demolitionmelbourne.net
*.densionusa.com
*.dogbone.org
*.farmcountrycottages.co.uk
*.floodclaims.com.au
*.foxcrestrockaway.com
*.gardeninglover.com
*.grenadeers.com
*.hqporne4.com
*.huthamcaucondao.com
*.implantable.io
*.keleyb.com
*.kiwivapor.co
*.leftygames.io
*.loginpage.biz
*.luanvan198.com
*.luisavivaroma.com
*.lumsity.com
*.luxorest.com
*.mindbodymastery.au
*.north-e.com
*.onlyvolvobus.com
*.pcmagz.co.uk
*.peliculasytv.tv
*.phongkhamnhakhoa.asia
*.pte.asia
*.riaspace.net
*.rihu.com
*.rise-ltd.co.uk
*.samsunghowtodeleteinternet.co
*.soundpark.zone
*.ssstiktok.cc
*.surfpunks.io
*.swanageseen.co.uk
*.terrify.me
*.thietbisukien.asia
*.xiangjiaozy7.com
*.xn--2021-ek3pzrh8cn0uc49a34k.com
abmsusa.com
altadefinizione.zone
applab.au
bbestbuy.ca
bd82f8o6xmiwv5vj.us
botroulette.site
callpanel.biz
candyhub.online
cisefad.org
colabs.asia
criptomestre.com
dekalbcountyga.us
demolitionmelbourne.net
densionusa.com
dogbone.org
farmcountrycottages.co.uk
floodclaims.com.au
foxcrestrockaway.com
gardeninglover.com
grenadeers.com
hqporne4.com
huthamcaucondao.com
implantable.io
keleyb.com
kiwivapor.co
leftygames.io
loginpage.biz
luanvan198.com
luisavivaroma.com
lumsity.com
luxorest.com
mindbodymastery.au
north-e.com
onlyvolvobus.com
pcmagz.co.uk
peliculasytv.tv
phongkhamnhakhoa.asia
pte.asia
riaspace.net
rihu.com
rise-ltd.co.uk
samsunghowtodeleteinternet.co
soundpark.zone
ssstiktok.cc
surfpunks.io
swanageseen.co.uk
terrify.me
thietbisukien.asia
xiangjiaozy7.com
xn--2021-ek3pzrh8cn0uc49a34k.com

Other certificates including the domain name kiwivapor.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for kiwivapor.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377163400593248576057716485684849572070827
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 23:36:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 23:36:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiwivapor.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 847745605180773132605305352866659393808164144721994324026257714250091371817380205206308094500153476997589346097658834849619628983858126976171073463721852518578512006520631187602456267301012704239853037747349014603238557406854090766453542172988252749908684961197940014015351259189880558444078469238404825790957078918589246510334234218840247940711081261868702467519086971574158050189654274906852340770258880695684298578779956451991254516217273230059625643808257724331632213142124306714924333044145481418290376668414413926236512790204742165307315931535082333851255791551952421075034249654100265295401310015485080127002441235250916578286947258506576448138090151254545900952158470291886667219623864340946584792771960636167568071679205898519544191208522039067737522714086521758353688147990690652241951246975699571950696946101641348715299950136160065013642204880448243769617188764472618891510422821811585146819510318667097014509338462822607635708597472339171466349754375269239001083114210173267672135253848621903011443653935115632359532518380325221071700358573682156902775152271073266071935467424872148221274352852552257881900274332467979173289188113826077437602542667215886756846152900338012583829476246908565316121906815706682556340001683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6aef0dd0688cfaec44a7ea38d334ad2da5646799
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1812 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abmsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altadefinizione.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applab.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bd82f8o6xmiwv5vj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botroulette.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.callpanel.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.candyhub.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cisefad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colabs.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.criptomestre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dekalbcountyga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demolitionmelbourne.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.densionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogbone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmcountrycottages.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floodclaims.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxcrestrockaway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gardeninglover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grenadeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqporne4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huthamcaucondao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.implantable.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keleyb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiwivapor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leftygames.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loginpage.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luanvan198.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luisavivaroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumsity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxorest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindbodymastery.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.north-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlyvolvobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcmagz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peliculasytv.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phongkhamnhakhoa.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pte.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riaspace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rihu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rise-ltd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samsunghowtodeleteinternet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soundpark.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssstiktok.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surfpunks.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swanageseen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terrify.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thietbisukien.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiangjiaozy7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--2021-ek3pzrh8cn0uc49a34k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abmsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altadefinizione.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applab.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bd82f8o6xmiwv5vj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botroulette.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callpanel.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candyhub.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisefad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colabs.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criptomestre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekalbcountyga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demolitionmelbourne.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'densionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogbone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmcountrycottages.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floodclaims.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxcrestrockaway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardeninglover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grenadeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqporne4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huthamcaucondao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'implantable.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keleyb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwivapor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftygames.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loginpage.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luanvan198.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luisavivaroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumsity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxorest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindbodymastery.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlyvolvobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcmagz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peliculasytv.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phongkhamnhakhoa.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pte.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riaspace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rihu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rise-ltd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsunghowtodeleteinternet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundpark.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssstiktok.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfpunks.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swanageseen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrify.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thietbisukien.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiangjiaozy7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--2021-ek3pzrh8cn0uc49a34k.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae8aa31490000040300473045022100b937b390aefbf166f1302f925bc6af51f858504b201ab075e50b0d62fc9680c402200bcab5047a9b9a9023211fb6316da7d22170739529c45e85ce65a771f09d6873007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae8aa314400000403004630440220009c170e62202f7a6a6e0433d196bc02bec3361e1e76e11ec6a61a485e028bf40220351dbf41e572ce790b1818a87e0282d447df6307cb011af2d4288b3f309f631f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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