blueberry-blewbury.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:fe:80:93:93:9d:20:4b:42:9a:d9:b5:27:28:38:b1:5c:df was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=blueberry-blewbury.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fe:80:93:93:9d:20:4b:42:9a:d9:b5:27:28:38:b1:5c:df
Serial Number (int): 435051772370021057913404310990974262271199
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ef:42:b7:02:9b:8d:d9:98:f5:b0:0e:e3:bd:3b:7d:9a:be:c8:42:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:59:26:27:87:a6:48:a1:4e:20:6a:91:e8:98:be:79:00:ed:91:de
Fingerprint (sha256): a7:f9:45:fd:92:b7:83:79:d2:d0:cf:2f:79:ca:69:be:0b:a7:f0:17:37:7a:32:2b:8d:89:34:83:ee:26:6f:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blueberry-blewbury.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blueberry-blewbury.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1nudisttube.com
*.abcirclepro.com
*.amavip.me
*.baixae.com
*.bakabt.com
*.bathford.com
*.bdv.no
*.bebylist.com
*.blueberry-blewbury.co.uk
*.businesspromotionalproducts.com.au
*.climbers.org
*.clothingheaters.com
*.datingmore.com
*.dekkvarehuset.no
*.designbaji.com
*.dirtyroylette.com
*.fangwai.com
*.gonzaga.uk
*.handyfeelings.com
*.heroturko.org
*.instragran.com
*.intersever.net
*.kalium-nitricum.de
*.laclassifieds.com
*.legalseparation.com.au
*.matureteacherxxx.com
*.mazeng.com
*.mcg-group.com.au
*.megafilmestorrenthd.net
*.miseendemeure.com
*.naevuszellnaevus.de
*.nfhsnrtwork.com
*.pcoverlook.com
*.pokemonepisode.org
*.preply.co
*.repersent.com
*.riversandal.com
*.sampasite.com
*.sohautestyle.com
*.ssenes.com
*.submitinnovativeideas.com
*.tartpage.com
*.teamskee.com
*.thepictureframers.com.au
*.todayisgift.com
*.torrentvideoplayer.com
*.toyota-fss.com
*.vitaminshppe.com
*.wwwadomyinfo.com
*.yandax.com
1nudisttube.com
abcirclepro.com
amavip.me
baixae.com
bakabt.com
bathford.com
bdv.no
bebylist.com
blueberry-blewbury.co.uk
businesspromotionalproducts.com.au
climbers.org
clothingheaters.com
datingmore.com
dekkvarehuset.no
designbaji.com
dirtyroylette.com
fangwai.com
gonzaga.uk
handyfeelings.com
heroturko.org
instragran.com
intersever.net
kalium-nitricum.de
laclassifieds.com
legalseparation.com.au
matureteacherxxx.com
mazeng.com
mcg-group.com.au
megafilmestorrenthd.net
miseendemeure.com
naevuszellnaevus.de
nfhsnrtwork.com
pcoverlook.com
pokemonepisode.org
preply.co
repersent.com
riversandal.com
sampasite.com
sohautestyle.com
ssenes.com
submitinnovativeideas.com
tartpage.com
teamskee.com
thepictureframers.com.au
todayisgift.com
torrentvideoplayer.com
toyota-fss.com
vitaminshppe.com
wwwadomyinfo.com
yandax.com

Other certificates including the domain name blueberry-blewbury.co.uk

(limited to 100 certificates)
blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
blueberry-blewbury.co.uk
msibeutystudio.com
www.blueberry-blewbury.co.uk
winboynton.net
tamilviral.net
blueberry-blewbury.co.uk
blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
blueberry-blewbury.co.uk
blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
blueberry-blewbury.co.uk
cauton.com
www.blueberry-blewbury.co.uk

Certificate

The complete raw certificate details for blueberry-blewbury.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435051772370021057913404310990974262271199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 11:58:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 11:58:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blueberry-blewbury.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831342453747775016407657556319807554452100882794495805941519563264212936443072613463003458041460228326894161523935299225831138553493651418860350092135839050132480647547108613740284990003993148418727868098306189635108364918123688917692912137429226909079846518156791247479984619045511668130683417162962098967168347495244064903834250524292901193167395558358827258676061238535845689825785332279963790691799281985816164725659425854361157165716172018208039887161613758846547571577519532089050057499378058946820516287616742666304255527697476781965610616544611879169421644196663415261342832555809973262287813649482976530196838277205739750594324678156108514440777046876630446309509835065468648824491445073259773453968835990114003312718770728997054684435010890567986670720717580838386992326011327088010918792223965410852217484602654827029753971322249223617551836763636534593936579222413167512323098138288223262446586040364315354379304139140464069948398180240150184995255428462889725328026051879836597096073344244884744918825077580746248051908105506761679419449946541348142440697558462002151284464321361928822442431048653644014459954914503450142138410486819994523043289412594319513870533265437234783184214354155468474796170973381188784799407729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef42b7029b8dd998f5b00ee3bd3b7d9abec842df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1842 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1nudisttube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcirclepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amavip.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baixae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakabt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bathford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bdv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bebylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blueberry-blewbury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesspromotionalproducts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.climbers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clothingheaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datingmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dekkvarehuset.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designbaji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dirtyroylette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fangwai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gonzaga.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handyfeelings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heroturko.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instragran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intersever.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalium-nitricum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laclassifieds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legalseparation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matureteacherxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mazeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcg-group.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megafilmestorrenthd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miseendemeure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naevuszellnaevus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfhsnrtwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcoverlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokemonepisode.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preply.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repersent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riversandal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sampasite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sohautestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssenes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.submitinnovativeideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tartpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamskee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepictureframers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todayisgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentvideoplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota-fss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitaminshppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwadomyinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yandax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1nudisttube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcirclepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amavip.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baixae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakabt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bebylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueberry-blewbury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesspromotionalproducts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climbers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clothingheaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datingmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekkvarehuset.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designbaji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirtyroylette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fangwai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonzaga.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handyfeelings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heroturko.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instragran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intersever.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalium-nitricum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laclassifieds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalseparation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matureteacherxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcg-group.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megafilmestorrenthd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miseendemeure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naevuszellnaevus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfhsnrtwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcoverlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokemonepisode.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preply.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repersent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riversandal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sampasite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sohautestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssenes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'submitinnovativeideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tartpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamskee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepictureframers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todayisgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentvideoplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota-fss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaminshppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwadomyinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yandax.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e37e4e63b0000040300473045022100b98628921a50389b000ba19eef4b8528c49683812cd98ac3c3c12bbc85664f8902204863f09d99fd08e81245b851513df4a78f1ddf5df8f079ecc1868e99c5328eec00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e37e4e6410000040300473045022100c5005301ea2cd97ba33170fb5274fdb1cd3dfb35ccfe228a10434c7a795effdb02203b7039c9757a9c7dae36babe598a5d74bec504d2ce2bced7e2465c4c1bb7bb57
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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