*.acgft.us

Issued by R3

About this certificate

This digital certificate with serial number 03:22:db:04:c3:06:b4:cd:0b:7b:38:cc:b0:17:ef:21:33:34 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.acgft.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:db:04:c3:06:b4:cd:0b:7b:38:cc:b0:17:ef:21:33:34
Serial Number (int): 273197583926458175286044138507501945566004
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:dd:c5:a8:f9:e7:ec:17:cb:60:3b:82:7f:22:72:18:37:70:99:9d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3a:6e:12:51:18:06:89:4c:bc:b0:ab:e1:05:7e:09:a6:73:81:93:70
Fingerprint (sha256): b0:1f:f2:cc:1d:b8:b5:32:87:61:9a:32:b0:ad:d4:40:f6:bb:d2:e8:3b:f4:06:eb:84:89:2e:d0:58:20:e4:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.acgft.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.acgft.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acgft.us
*.addictoncenter.com
*.allfurnituremustgo.com
*.anucollege.com.au
*.aplineaccess.com
*.ballarddesigns.co
*.beatbullysticks.com
*.beeherb.site
*.biswroop.com
*.carnage.com.au
*.cd4y.com.au
*.ceaperthandirt.com
*.covermodelmarissa.com
*.cuiainart.com
*.cute-coloring-pages.com
*.daandylolopoole.com
*.dogtwist.com
*.erailer.com
*.foodservicereward.com
*.giatfood.com
*.gmfinncial.com
*.greenfingersandplants.com
*.greenmumma.com.au
*.jmscotiabank.com
*.jpopdl.com
*.justfashinnow.com
*.kikoswichita.com
*.lcrq.com
*.liveong.com
*.merricjbank.com
*.mmbdigital.com.au
*.myslima.com
*.nzuniversities.com
*.omeadvisor.com
*.pdfusermanual.com
*.pizzaovenshop.com.au
*.poorva.club
*.reeemail.win
*.safwlite.com
*.second-party-data.de
*.seebots.run
*.seenontiktoks.com
*.su2018.co
*.theflipreport.com
*.vbcpschools.com
*.vinasub.site
*.vodllock.online
*.wwwlalibaba.com
*.xn--mgbq7cfhn.com
*.zopomobile.fr
acgft.us
addictoncenter.com
allfurnituremustgo.com
anucollege.com.au
aplineaccess.com
ballarddesigns.co
beatbullysticks.com
beeherb.site
biswroop.com
carnage.com.au
cd4y.com.au
ceaperthandirt.com
covermodelmarissa.com
cuiainart.com
cute-coloring-pages.com
daandylolopoole.com
dogtwist.com
erailer.com
foodservicereward.com
giatfood.com
gmfinncial.com
greenfingersandplants.com
greenmumma.com.au
jmscotiabank.com
jpopdl.com
justfashinnow.com
kikoswichita.com
lcrq.com
liveong.com
merricjbank.com
mmbdigital.com.au
myslima.com
nzuniversities.com
omeadvisor.com
pdfusermanual.com
pizzaovenshop.com.au
poorva.club
reeemail.win
safwlite.com
second-party-data.de
seebots.run
seenontiktoks.com
su2018.co
theflipreport.com
vbcpschools.com
vinasub.site
vodllock.online
wwwlalibaba.com
xn--mgbq7cfhn.com
zopomobile.fr

Other certificates including the domain name acgft.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.acgft.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8Hp2aQXe/0C7O0+tq+ys
mq0v6prkDsTYZygggZz/6UJam9KnpDBwwmSi+GV/PwI6/1OMdMBPHrRvfmwZjb6y
ICF+D4dDaJ7uvGOoFmLgNVMun4fRU2vUvQMR6YdBzfImYh1IgpTEAQINk1mwLor2
+pIiOkl7siERQz7fb4JUVpGWQb65mF6OxiuDHyfCp+9xRKL7e5FULUMwdcw+fsCn
dhK7aETq/gyF27357L+2L1gk5lcWjJtXv8njgd2j5CW13LSmELnVO02doo6pCngs
oRF3/Ck4nRW3EqX8vxs+WyW3u3ahO60JADN51VL285Htcs9eqTraQhLaBWQ/uKFO
uZ1aFp9muP8CHzs26Qg9G5xJy3s+54hhA0uPHg3OrdBZp0uJy41zlNg7LTeXgtb4
3JTpzkO6CY78Lo1QQCh+FEOigeIueCWOKl83nrsnBwza0b23X2UUMFo5D6JBbcrp
5Vhnd54eIIGrCCwoLmQwTfUN/QOjXpvSN1Mkw9VDfAoei6gp0czy58J1kstiqqXL
QxFhR7dUfTQVzs1cG/75h8x1e26erzlTxZWuhyXeYZbzsTeIo+NrZT0d0Dkw662p
YZvvdfQxk2GhBeFfjsezMdikxUxGlE8JGalDRlwXGRZHH0S8PntvyBrlQhEPkD7r
NTVqWHrenFSqMXCfAuEhy4cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273197583926458175286044138507501945566004
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-31 02:04:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 02:04:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.acgft.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 981066152789512796883675096982626652787888335508660318212750558157058234515968752370019552160729909246180985646048820285021304099665014104146122771596256003858377129348987740275240312792005602816489473000077313702513105471103207363972335972003561044768718054953508647575023384204793095455807876982385406473426208951661432446564728141955629431183831670274906294355186023717886991719646898000102968728947820383825929960019433087625146868902959272272681382309750624771860820586274153348676146976047230018211805609284850348034944555749640951255310488535906647717992266347063290273352589499501657358598940958660839337880332394082421629963429995240049674450839428194208666736774864195697574109371648306550241837441917276311313904624084783301181621431704014390230843886852187099101839826374429418516638913379161447498216772959920350114826240774525173329172449760125524471996397037809129534442707948957465771628302852901376074558015476911517110840562569729339470032875232797869525381365984222072535155263116331318015695822953152923470456350871769616942217302615810380160778520641263550806967928792570066204694645372140380611306533540909854893968508857840942872718004795324851538193462171204924858484680190008005625197533384679583109196401543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0ddc5a8f9e7ec17cb603b827f2272183770999d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acgft.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addictoncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allfurnituremustgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anucollege.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aplineaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ballarddesigns.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beatbullysticks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beeherb.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biswroop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carnage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cd4y.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceaperthandirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.covermodelmarissa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuiainart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cute-coloring-pages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daandylolopoole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogtwist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodservicereward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giatfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmfinncial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenfingersandplants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenmumma.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmscotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jpopdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justfashinnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kikoswichita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lcrq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merricjbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmbdigital.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myslima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzuniversities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omeadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdfusermanual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pizzaovenshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poorva.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reeemail.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safwlite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.second-party-data.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seebots.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seenontiktoks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.su2018.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theflipreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vbcpschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinasub.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vodllock.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwlalibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mgbq7cfhn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zopomobile.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acgft.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addictoncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allfurnituremustgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anucollege.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aplineaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballarddesigns.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatbullysticks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beeherb.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biswroop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cd4y.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceaperthandirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covermodelmarissa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuiainart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cute-coloring-pages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daandylolopoole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogtwist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodservicereward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giatfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmfinncial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfingersandplants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenmumma.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmscotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpopdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justfashinnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kikoswichita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcrq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merricjbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmbdigital.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myslima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzuniversities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omeadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdfusermanual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizzaovenshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poorva.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reeemail.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safwlite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'second-party-data.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seebots.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seenontiktoks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'su2018.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theflipreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vbcpschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinasub.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodllock.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwlalibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mgbq7cfhn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zopomobile.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018735a006da00000403004730450220754859760e58c821adc47d34db875ef2a1b2d12751539b93719a5b8c7ee029a602210081941b7210b1fad5b127b87a6a2a4084cc1f3f5ff0eec1dd73be9e20889b5be9007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018735a007380000040300483046022100f89cb00e5e0b3524aefd99ef286eac54cfa92c9d76a1c76e542f365a7f9509b4022100ad8649502c751513b6fe62083b217d7cd4bc1b1e047e4ee50c68d9a128d8d74c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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