magijack.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c7:ac:49:18:ae:8a:e8:51:fe:af:f1:5c:aa:85:06:da:60 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=magijack.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c7:ac:49:18:ae:8a:e8:51:fe:af:f1:5c:aa:85:06:da:60
Serial Number (int): 329282055566099693296117000180060301744736
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:af:63:20:4e:78:03:b4:30:85:7b:f7:e7:91:ad:08:25:b5:3f:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:9d:87:d5:41:13:d6:b5:66:2e:4e:9d:8a:87:3a:b0:65:80:3f:f4
Fingerprint (sha256): a7:cf:30:0f:34:68:99:0d:11:44:06:7e:79:1b:5b:a7:1e:45:88:58:b8:e1:fa:04:38:bc:b0:14:96:1b:db:e8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate magijack.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magijack.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.29mao.com
*.adorablehomeraisedpuppies.com
*.adultdatingpartner.com
*.afapoker.asia
*.applyfortscard.com
*.barriemstu.com
*.brainquote.com
*.cartoonani.com
*.circlermotel.net
*.deckoutdetroit.com
*.discordapps.com
*.discover-the-cash-secret.com
*.edpizzle.com
*.elmofan-school.com
*.huasej6.com
*.korsite38.com
*.kristyalley.com
*.kumonplu.com
*.lanhuapp.co
*.lawyeronrequest.com.au
*.loujact.com
*.magijack.com
*.makingayporn.com
*.maplegacy.net
*.mboomanchoo.com
*.milehighselection.com
*.myexgifriend.com
*.niagarainterlockbaseball.com
*.nysdnv.com
*.parfumdepapillon.com
*.pcremonteserver.com
*.perigorgites.com
*.robopick.com
*.samsucard.com
*.sangreenlinea.com
*.scibble.io
*.scribbel.io
*.shirtmonarcy.com
*.sportsutge.gg
*.stabuck.com
*.streereasy.com
*.tintology.biz
*.usahocey.com
*.viviendasroca.com
*.whomeheavenae.com
*.woz3.com
*.wrightwaysexpress.com
*.xiaoqiai.com
*.xxnxvideoa.com
*.y5868.com
29mao.com
adorablehomeraisedpuppies.com
adultdatingpartner.com
afapoker.asia
applyfortscard.com
barriemstu.com
brainquote.com
cartoonani.com
circlermotel.net
deckoutdetroit.com
discordapps.com
discover-the-cash-secret.com
edpizzle.com
elmofan-school.com
huasej6.com
korsite38.com
kristyalley.com
kumonplu.com
lanhuapp.co
lawyeronrequest.com.au
loujact.com
magijack.com
makingayporn.com
maplegacy.net
mboomanchoo.com
milehighselection.com
myexgifriend.com
niagarainterlockbaseball.com
nysdnv.com
parfumdepapillon.com
pcremonteserver.com
perigorgites.com
robopick.com
samsucard.com
sangreenlinea.com
scibble.io
scribbel.io
shirtmonarcy.com
sportsutge.gg
stabuck.com
streereasy.com
tintology.biz
usahocey.com
viviendasroca.com
whomeheavenae.com
woz3.com
wrightwaysexpress.com
xiaoqiai.com
xxnxvideoa.com
y5868.com

Other certificates including the domain name magijack.com

(limited to 100 certificates)
*.03ka036.com
creativenailplace.com
magijack.com
bgviagens.com
magijack.com
magijack.com
magijack.com
organiccompound.com
magijack.com
overlandtour.com
magijack.com

Certificate

The complete raw certificate details for magijack.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329282055566099693296117000180060301744736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 06:12:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 06:12:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magijack.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 857645620041335971105463314123461292710555231419221238163564314887462170669655201537420902603761345290212230619194188669729853916198070320340417203489114770941143431031680326257198499435747568402614890720605257538879417198928295768598096417875990355352012379681362907286982735439536957591911107131310901873732604545318957147036590935767785095599384141221983588079127206560858284756270070546222221417586498473637044117226294706352084600474165707451793701090688013986642692850137975613623286028513876139468412327670559537106740598572522059893875610867094945586797974120036672791734532407695566279450595472439567718591178451743482854903659595904414119299677541509650953176353510130173851717498027232433627195641064869501686174226756283249141285154146302815744624199686720246867946855260787019971971827928522237760855949614437625901312589994612581012787115449448169312668464939455373604811632696768562617253754950392693898422454760139804209447520101233381259901619947948063014583412971339243405278096634173062973217058525125721053296421929647077803169134037620222973021241681076528641917171753008770254265948839319220775487809816873683403073711895324235929688641335079579567101103385298528009856880758032931249385189821625681197997529517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0af63204e7803b430857bf7e791ad0825b53f71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1826 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.29mao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adorablehomeraisedpuppies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultdatingpartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afapoker.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applyfortscard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barriemstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brainquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.circlermotel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deckoutdetroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discordapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discover-the-cash-secret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edpizzle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elmofan-school.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huasej6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.korsite38.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kristyalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kumonplu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lanhuapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawyeronrequest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loujact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magijack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makingayporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maplegacy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mboomanchoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milehighselection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myexgifriend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niagarainterlockbaseball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nysdnv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parfumdepapillon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcremonteserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perigorgites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robopick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samsucard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sangreenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scibble.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scribbel.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirtmonarcy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsutge.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stabuck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streereasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tintology.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usahocey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viviendasroca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whomeheavenae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woz3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrightwaysexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiaoqiai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxnxvideoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.y5868.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '29mao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adorablehomeraisedpuppies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultdatingpartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afapoker.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applyfortscard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barriemstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlermotel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deckoutdetroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discordapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover-the-cash-secret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edpizzle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmofan-school.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huasej6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korsite38.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kristyalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kumonplu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanhuapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawyeronrequest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loujact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magijack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makingayporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maplegacy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mboomanchoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milehighselection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myexgifriend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarainterlockbaseball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nysdnv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parfumdepapillon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcremonteserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perigorgites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robopick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsucard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangreenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scibble.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scribbel.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirtmonarcy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsutge.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stabuck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streereasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tintology.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usahocey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viviendasroca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whomeheavenae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woz3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrightwaysexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiaoqiai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxnxvideoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'y5868.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ad054c20c0000040300473045022100b259f16ed64e48961b06a4dcf7fa8d300161488e2327230d15a28d51a4ca3e1b0220076e99ef8dadebdd0c97692827b9aca9b55d3bdb9a3540161a991d7efc9315d0007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ad054c1d60000040300473045022100f9935728d2a9c7a975284ceaef850b2c4ca7ffb4418bf88b92f7d7f43b489bf202206311bd3c629c068d88041d7ca27f8cdcacf89799d21baf6567dcc5c6eda4e9d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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