donunt.shop

Issued by R3

About this certificate

This digital certificate with serial number 03:4d:e9:7d:cf:23:68:a4:50:d8:f0:4d:8e:27:50:36:ff:14 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=donunt.shop

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:e9:7d:cf:23:68:a4:50:d8:f0:4d:8e:27:50:36:ff:14
Serial Number (int): 287848963409582362608933693898052385308436
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:4b:06:7c:41:92:0d:7b:27:93:b0:8d:9f:e3:f4:af:0f:3f:3b:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:05:49:39:fd:1c:4c:14:e0:a1:94:c1:cb:bd:69:5e:a9:53:44:87
Fingerprint (sha256): ad:bf:d6:3f:dc:7a:83:37:75:8d:db:d6:5f:ee:de:fd:ac:df:e8:71:56:68:a9:9f:4a:32:f5:71:e3:12:19:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate donunt.shop

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for donunt.shop

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.allthebest.com.au
*.amazonspeciallimitedoffer.com
*.anteaterbard.com
*.badcreditloans.net.au
*.beddivans.co.uk
*.blauckbaud.com
*.blueagaveclub-hub.com
*.charlestonmangement.com
*.crawltohell.com
*.donunt.shop
*.drdollar.au
*.e9gag.com
*.enkou.club
*.flight59.com
*.gemrealestate.au
*.gigalife.online
*.grecians.com
*.hl-usa.com
*.interhockey.shop
*.itsfworldtour.com
*.kitnetic.net
*.kpfprepaidcard.com
*.mekanda.online
*.modernutrition.com
*.nikanani.me
*.notrepuppy.com
*.nyrado.com
*.online24-7.online
*.oyster-app-kzdus-ondigitalocean.app
*.playvid.org
*.pound-land.co.uk
*.reservealpark.com
*.reter.me
*.s6-earn.buzz
*.savefrom.ne
*.sex-match.org
*.solarmoviex.com
*.texansforthompson.com
*.tlfer.com
*.toontownnext.net
*.untimaco.com
*.vipzal24.com
*.visa55.com
*.weshrak.fr
*.womanassociates.com
*.wowunvut.com
*.wwwbienestarazteca.com.mx
*.xn--qzww09c.com
*.zayy01.xyz
allthebest.com.au
amazonspeciallimitedoffer.com
anteaterbard.com
badcreditloans.net.au
beddivans.co.uk
blauckbaud.com
blueagaveclub-hub.com
charlestonmangement.com
crawltohell.com
donunt.shop
drdollar.au
e9gag.com
enkou.club
flight59.com
gemrealestate.au
gigalife.online
grecians.com
hl-usa.com
interhockey.shop
itsfworldtour.com
kitnetic.net
kpfprepaidcard.com
mekanda.online
modernutrition.com
nikanani.me
notrepuppy.com
nyrado.com
online24-7.online
oyster-app-kzdus-ondigitalocean.app
playvid.org
pound-land.co.uk
reservealpark.com
reter.me
s6-earn.buzz
savefrom.ne
sex-match.org
solarmoviex.com
texansforthompson.com
tlfer.com
toontownnext.net
untimaco.com
vipzal24.com
visa55.com
weshrak.fr
womanassociates.com
wowunvut.com
wwwbienestarazteca.com.mx
xn--qzww09c.com
zayy01.xyz

Other certificates including the domain name donunt.shop

(limited to 100 certificates)
donunt.shop
missiassaugahsale.com
donunt.shop
interhockey.shop

Certificate

The complete raw certificate details for donunt.shop in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7snRtGAHdGQJeeOhy3B/
ko2iaSkBZwkOkUfeKfUO9/JIMkX74kwZzKQIf3lPANj3Cnri9pWBCLwmixfzBN9n
7oPeX2T1viiXLyX0AS8cCVUxducXscWoQ40rO7TX9YTHf1lBsM4OYIgSfnkPgPYR
/Lzgc6Td1lv18dTeEyHHU/Jmc8Pt56hzEoe9Vke5AgZ81mBYZX7IAgaTdIzFePxZ
VpuuBZzrKONrWfu1+EN4yJ+CmJsjsIsGlUdDTOXrP9vcYGe8m/4kHBY2udtziyxJ
56FFVl0Rl0aDfBZ255DNsw5gimGVGQ1+zrIQaU0Ygr/UZMKs/+xXQdYDGrf8pE1Q
Z2WqWHwRRhQCwl47lmAfSS5+9AxrpTz4qPpFavB3PP+eHFOqOiK2RYoqZaf2xXFk
eVehy45OSf9DlcJM/tPNRKNID9ZdzUzrh/4BlCjzbCt3rpfnWLEAiL0ZLbxt0Lgg
sVP5iCdglW5xnNQ7gA++aN/SZbF+MfZouQut5irvMrUptEpBE65B6v6wyBFn6mVX
gwEtKhC9GY4xXygj+i+XVI4l0hQfNT/lUdsd4O6KFyejBXBjk6OIpGLbUPr7wqXM
hV2O2UjUOtBPx8BfLeb78ar53M78L2NrC9DSXViz0Rr95N2hWVnIa9iX5F8RV7Et
dx/xDdIJjebWVhbm0Y1hqHMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287848963409582362608933693898052385308436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 04:42:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 04:42:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'donunt.shop'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 974171500427130202420281243543393026771929868354322660839895554056952378300564582342646218000392060324887729196548106358314738249919633955812382815996801768624160546977821837379839935921023025359050921084538931257108920063599460001247745145996252272376075436445111314329876484530600177570663166976529901986302864816866699720336574377697951020851420784694478000935373669033531223631033930443755212745040247381182481814976865091556475308378248650642644598389428619771920883507744263761139652259535369433640567795183736104203543019723740654481180544468973287803826658988767872837166504982264641496772227366626046994086767948295951830732207809368788530260279939728596527157745817740590130724039542523309311614602453237516356861047632930291479845406167739315406655015920848071735745006303570952758682870733308664945052772740580169193939574198078712670552947510586307290020011855827971733587283927399567616992786134436215790648231306788535987387434805743396839241093309821114545438492043327978590270959943620296251098511787348572456314239260346194332916882210700583603420488576602933193394320221452631211876748787213636680299982443213754030479806951641102897342698258597655861259678659985806928498279041298237160114070593770469699233097843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d34b067c41920d7b2793b08d9fe3f4af0f3f3b4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1764 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allthebest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazonspeciallimitedoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anteaterbard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.badcreditloans.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beddivans.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blauckbaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blueagaveclub-hub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charlestonmangement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crawltohell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donunt.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drdollar.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e9gag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enkou.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flight59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemrealestate.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigalife.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grecians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hl-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interhockey.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itsfworldtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitnetic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kpfprepaidcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mekanda.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modernutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikanani.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notrepuppy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyrado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.online24-7.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oyster-app-kzdus-ondigitalocean.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playvid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pound-land.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reservealpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reter.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s6-earn.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savefrom.ne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sex-match.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solarmoviex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.texansforthompson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tlfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toontownnext.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.untimaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipzal24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visa55.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weshrak.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womanassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wowunvut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbienestarazteca.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--qzww09c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zayy01.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allthebest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonspeciallimitedoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anteaterbard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badcreditloans.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beddivans.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blauckbaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueagaveclub-hub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlestonmangement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawltohell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donunt.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drdollar.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e9gag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enkou.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flight59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemrealestate.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigalife.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grecians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hl-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interhockey.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsfworldtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitnetic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpfprepaidcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mekanda.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikanani.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notrepuppy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyrado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online24-7.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oyster-app-kzdus-ondigitalocean.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playvid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pound-land.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservealpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reter.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's6-earn.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savefrom.ne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sex-match.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarmoviex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texansforthompson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toontownnext.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untimaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipzal24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visa55.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weshrak.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womanassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowunvut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbienestarazteca.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--qzww09c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zayy01.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c42ccd4cf000004030046304402204b767eb63e7adf3445071fd14032a12436f30279ccb540ec8375a757b1b5f06002203bc0628050d8d691b948da70b4d295a19069693bb76dc3bcbd9685da9757a012007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c42ccd4ef0000040300473045022100c4d09331834112cdb8782f7b40d97d77281789c18d2ced6cd6a341bd070918b50220024e0a475e120fc404a469aaa1de800301f381259b5adae95c51043df8fe7b93
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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