nunn.tv

Issued by R3

About this certificate

This digital certificate with serial number 03:cf:55:80:d9:b0:c1:ce:f4:68:7d:a0:d9:67:7a:c7:b9:7f was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nunn.tv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:55:80:d9:b0:c1:ce:f4:68:7d:a0:d9:67:7a:c7:b9:7f
Serial Number (int): 331888961156841633578645819052667817146751
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:10:29:1b:d9:b4:61:f4:a2:ae:de:ac:b8:8a:06:7e:f8:fb:67:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b2:85:72:43:4e:4e:de:20:69:21:5d:54:4d:92:c1:ec:b3:cd:15:68
Fingerprint (sha256): a6:f8:39:5b:17:34:01:5e:14:07:b6:b1:94:f1:9d:58:45:9b:e3:c2:42:4a:57:f6:7f:08:dc:10:3f:0c:37:92

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nunn.tv

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nunn.tv

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.420spa.com
*.anulka.com
*.barrobrunido.com
*.bestolaris.com
*.bestsolaria.com
*.bestsolrais.com
*.bidjan.com
*.blaber.com
*.buenlider.com
*.calcolamutuo.com
*.camly.com
*.chincarini.com
*.concia.com
*.crutchmate.com
*.deine.com
*.dostawa.com
*.flutlicht.com
*.frapo.com
*.gregoryfamily.com
*.hanmaum.com
*.hazlorealidad.com
*.imghosted.com
*.khleg.com
*.lovepak.com
*.lumau2.com
*.manshet.com
*.mauney.com
*.meinbghm.de
*.methdtreams.com
*.methetreams.com
*.methstreaams.com
*.methxtreams.com
*.metjstreams.com
*.myanmarmodelsgirl.com
*.noean.com
*.nunn.tv
*.olimpicastereo.es
*.paung.com
*.penisforstoring.com
*.prathima.com
*.rent1st.us
*.royaldomino.biz
*.shiyu.com
*.thediamondjubilee.com
*.tongha.com
*.trransferwise.com
*.tsukui-saiyou.net
*.vendez.com
*.whangaroa.com
420spa.com
anulka.com
barrobrunido.com
bestolaris.com
bestsolaria.com
bestsolrais.com
bidjan.com
blaber.com
buenlider.com
calcolamutuo.com
camly.com
chincarini.com
concia.com
crutchmate.com
deine.com
dostawa.com
flutlicht.com
frapo.com
gregoryfamily.com
hanmaum.com
hazlorealidad.com
imghosted.com
khleg.com
lovepak.com
lumau2.com
manshet.com
mauney.com
meinbghm.de
methdtreams.com
methetreams.com
methstreaams.com
methxtreams.com
metjstreams.com
myanmarmodelsgirl.com
noean.com
nunn.tv
olimpicastereo.es
paung.com
penisforstoring.com
prathima.com
rent1st.us
royaldomino.biz
shiyu.com
thediamondjubilee.com
tongha.com
trransferwise.com
tsukui-saiyou.net
vendez.com
whangaroa.com

Other certificates including the domain name nunn.tv

(limited to 100 certificates)
nunn.tv
nunn.tv
nunn.tv
nunn.tv
nunn.tv

Certificate

The complete raw certificate details for nunn.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331888961156841633578645819052667817146751
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 08:45:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 08:45:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nunn.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810812449637255452067504178338411651551390260309222398888211597326730937547949057632838523896420944514479855887439702732022167066907584106082426954765396257810540156914041403207456123380228622681776560341940082916739029455419482710751850940256748899495374899343185425439405292645462978501887637846660951338920984256211791821844061548196604939105459303327209852211191074842894101398626400319700680205267881827230539627757385014903856161672661958383578753913197010341314559018846594037526169515451730346106192777687090474129103128192639498838162202336845142649075551752477287768162822880773740962000919098579841853480334127069605098765031272154840478404251057864382648191214608167026204412530068755059752212902009934307797041616105142609070777921017237422056611622258930836662527244558506028806360302893606421598722296057767571084515433924549382271782073753078518966230319828167103606833574940439569343535516873440671554541219798796333136753144711475015306493501929662883084473122178698927819903329136109258115231773488012070667944396217119157848245497524324298380067770773415522940910448126336420715268126730299061245022332852580168827616345397031443397226979546347714317892094790930770640514893222676379205419592100637436250793623027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9410291bd9b461f4a2aedeacb88a067ef8fb6757
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1558 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.420spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anulka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barrobrunido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestolaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsolaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsolrais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bidjan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buenlider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calcolamutuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chincarini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crutchmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dostawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flutlicht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frapo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gregoryfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanmaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hazlorealidad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imghosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovepak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumau2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manshet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mauney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meinbghm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.methdtreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.methetreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.methstreaams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.methxtreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metjstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myanmarmodelsgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nunn.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olimpicastereo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penisforstoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prathima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rent1st.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royaldomino.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shiyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thediamondjubilee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tongha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trransferwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsukui-saiyou.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vendez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whangaroa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '420spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anulka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrobrunido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestolaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsolaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsolrais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidjan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buenlider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calcolamutuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chincarini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crutchmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dostawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flutlicht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frapo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gregoryfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanmaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazlorealidad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imghosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovepak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumau2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manshet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meinbghm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methdtreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methetreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methstreaams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methxtreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metjstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myanmarmodelsgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nunn.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olimpicastereo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penisforstoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prathima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rent1st.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaldomino.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thediamondjubilee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tongha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trransferwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsukui-saiyou.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bcd38e3a8000004030047304502205e655e3e5eb0a980feb945fa52774e9e693ae5ee2f01a4fe53a5855232c4a2d6022100fdf7b1a1dc25ba94254b4d19667ab53bd62a07333caff74185dcfa7c26d70c330075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcd38e3ae0000040300463044022008901e654d65702576e95680d67e491565cf94433cc980b5f233f18eb031103902201aaa0bcb1720bbdc955fa8452f5196140b2e13eecadec55c3258e84651ba982a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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