dnamining.com

Issued by R3

About this certificate

This digital certificate with serial number 03:01:d2:65:8c:d4:6e:9a:28:43:1a:7f:4d:e1:cf:3f:f3:dd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dnamining.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:d2:65:8c:d4:6e:9a:28:43:1a:7f:4d:e1:cf:3f:f3:dd
Serial Number (int): 261956805319667167434282322208840623322077
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:2c:e3:8d:3d:e0:fc:82:18:5a:6a:57:85:7e:4f:63:b2:61:26:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): aa:31:3d:9d:cc:63:63:e0:03:4f:be:41:64:d3:b3:96:65:d5:10:0e
Fingerprint (sha256): ac:cd:35:3f:05:bb:fa:97:a9:0b:9d:d7:1e:1b:ba:9a:c6:ca:85:a3:a7:0e:9a:bc:6a:42:c1:35:a8:cf:e2:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dnamining.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dnamining.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.62b70ac32d4614b.com
*.allokhaddar.com
*.americandebt.com
*.aokirin.me
*.associatedbank.co
*.betadirectories.com
*.censoredbooru.org
*.cosmiccow.com
*.custom-motor.com
*.dalzell.net
*.dancyin.com
*.dnamining.com
*.downloadram.net
*.familiandoandoviajando.com
*.florida-private-investigator-near-me.com
*.hayvaomua.com
*.httpvimeo.com
*.independentrealestateagents.com.au
*.kopkeluargakaribon.com
*.kuppipaal.com
*.lascatrinastaqueria.com
*.magazinephotobooth.com
*.malioficial.com
*.mathserv.com
*.mediaamptcc.com
*.mjg.com.au
*.moonkissed.com
*.mortgagecomparisons.com.au
*.mrcnn.com
*.multimediape.com
*.myhomestoreshop.com
*.ntoon59.com
*.oacottawa.org
*.patriciarceasar.me
*.pozdrawleniya.com
*.raquelvip.es
*.reviewmyservice.com.au
*.saint-michel.com
*.songsmp3.live
*.spiray.com
*.ssoap2day.org
*.stonehold.com
*.swpoolspaservices.com
*.techybuddies.com
*.themoviesflix.net
*.unlockingcms.com
*.victoryfinance.co
*.vilchez.com
*.voody.com
*.zeinh.com
62b70ac32d4614b.com
allokhaddar.com
americandebt.com
aokirin.me
associatedbank.co
betadirectories.com
censoredbooru.org
cosmiccow.com
custom-motor.com
dalzell.net
dancyin.com
dnamining.com
downloadram.net
familiandoandoviajando.com
florida-private-investigator-near-me.com
hayvaomua.com
httpvimeo.com
independentrealestateagents.com.au
kopkeluargakaribon.com
kuppipaal.com
lascatrinastaqueria.com
magazinephotobooth.com
malioficial.com
mathserv.com
mediaamptcc.com
mjg.com.au
moonkissed.com
mortgagecomparisons.com.au
mrcnn.com
multimediape.com
myhomestoreshop.com
ntoon59.com
oacottawa.org
patriciarceasar.me
pozdrawleniya.com
raquelvip.es
reviewmyservice.com.au
saint-michel.com
songsmp3.live
spiray.com
ssoap2day.org
stonehold.com
swpoolspaservices.com
techybuddies.com
themoviesflix.net
unlockingcms.com
victoryfinance.co
vilchez.com
voody.com
zeinh.com

Other certificates including the domain name dnamining.com

(limited to 100 certificates)
dnamining.com
dnamining.com
falconcorporateadvisory.com
medicaliot.com
unncommongoods.com
zakaa.com
controlmypc.com
dnamining.com
dnamining.com
amcommunications.com
dnamining.com
op012.com

Certificate

The complete raw certificate details for dnamining.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv7HrZ0t8e/88iOZturB2
wcBUDG7RuDg4GP0AsAs2R7OIuSajbryP0zOcwQXVkqxz9Hpc0gzAgnfRhlaGr6Jg
1747USIYBm84o76OSICtuyEezx6kz036+AjI8gx9wr5IzEQyBMdyFH6J6GJhjvqR
SZKursivGrcQ8pm2Ym1IC2ujvwkrb7qTo6DfU+3zRzfW0IB7Pq9gwxGchf9RsUwZ
Ct9YUurNF0fz30U1E8CqeBXeQevc3PTsD1Iwb8SaFcZiOpd064giGa6vydfb/dRE
vp4b4ZaF1G52uZFw4Til1E122H5Sr3ZYvyHprenGiGiyCMHQdlxkmjZdY/jtVBCn
C6AaCDvqLi65+0mnS0/THGcXqBF8tCAUeZEPCSQExH1xaImLixTgZGwp1cK4ovv/
mKpo5A9iFL0H6TyPy43H2ggCOB6YUOFI7iCof/b2WbsP3GICwWvYQ3opQ6LqUC0B
YLPF2pgLRGbQTiOLUPr6JuVgeR5BNAqu1piS3MZJ7eDJNglitUa1T9ysmqjrawgE
LXyxkBt59Naii2Thpj0K+Sdr9TsjIa508jg9VFGoltonqmzaft/Msn3Pylq7hPcJ
tjLQiV2SEFEZwttSv9XbV5ERFgEq/RLf8Y3u1YOpTivpf5DDpMU8yOoldpyYY837
DBzFd1Tv3N3z/J4a6bZ81e0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261956805319667167434282322208840623322077
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 08:27:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 08:27:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dnamining.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782047362366668138675956922036586905326360820482452947613104410965446394690959648887018378309932882647940968092513008150736074910290999377194290771319062400330392689092597528051827260831170395110166148607610459074511507037276086151712513998663901661754100702203613958060533169859839303649415214005873222720355790299353242222918683297502223215328564001663348226730312195331053966927649380805513649479117059575401374704624400297122613887140688104179968468084662944879260104154226280480639595050412687060927518357209613551034733683800889428247146677343395659279249305912502973010224587895849823334581284389902253830034118602953477188951914946476932166046374926483871616059073547356479345738920396284745698672672174539491375110246831312512027928349167565200569024230259027699821250229932101294755522099570355049622962552135049162805172583250863876961140633421784647052580795135976233641509837971010421867659845708457281136113407231573414666363959000729506627684639019264091211905567244889551551325213722186674668365614873781583885064175389780589351982144935285929213431039948711346654398338510128827490649610988912725445439772256220344652996888897456312290707438745543126747684422376389717557263104978310245708885479480611698424275588589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							382ce38d3de0fc82185a6a57857e4f63b26126f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1920 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.62b70ac32d4614b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allokhaddar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americandebt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aokirin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.associatedbank.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betadirectories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.censoredbooru.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmiccow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.custom-motor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dalzell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dancyin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnamining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downloadram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familiandoandoviajando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.florida-private-investigator-near-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hayvaomua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.httpvimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independentrealestateagents.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kopkeluargakaribon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuppipaal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lascatrinastaqueria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magazinephotobooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malioficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mathserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediaamptcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mjg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moonkissed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgagecomparisons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrcnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multimediape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhomestoreshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntoon59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oacottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patriciarceasar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pozdrawleniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raquelvip.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reviewmyservice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saint-michel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.songsmp3.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssoap2day.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stonehold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swpoolspaservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techybuddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themoviesflix.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unlockingcms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victoryfinance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vilchez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '62b70ac32d4614b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allokhaddar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americandebt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aokirin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associatedbank.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betadirectories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'censoredbooru.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmiccow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custom-motor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalzell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancyin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnamining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familiandoandoviajando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florida-private-investigator-near-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayvaomua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httpvimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independentrealestateagents.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kopkeluargakaribon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuppipaal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lascatrinastaqueria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazinephotobooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malioficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaamptcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonkissed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagecomparisons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrcnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimediape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhomestoreshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntoon59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriciarceasar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pozdrawleniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raquelvip.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviewmyservice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-michel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'songsmp3.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssoap2day.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonehold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swpoolspaservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techybuddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themoviesflix.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlockingcms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoryfinance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vilchez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeinh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b759c7a740000040300463044022045c90f9ac0f71983eb7033bf4e7aa6e0884a8f5c989a0c9e0e5ba9b047aa938202207336cae07527f56076c7384d4380b10229640ac7b40b0bd2b5dddb25138917e1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b759c7a260000040300473045022012c7130569aa73949c2a7131253dd5fdae1db7b59b4337033529fcc08193fb15022100c69f67d036f91d45cbee4798d9f18849546a433ae3cd7e95e257ad7d25bd06e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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