bitait.net

Issued by R3

About this certificate

This digital certificate with serial number 04:91:e6:e9:b3:e2:44:33:c4:19:bc:50:10:b3:25:22:76:e5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bitait.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:91:e6:e9:b3:e2:44:33:c4:19:bc:50:10:b3:25:22:76:e5
Serial Number (int): 398097022823253624398106205919038411011813
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 35:76:85:8a:38:9f:c6:d5:21:33:06:6e:89:de:53:a3:0d:ea:a5:94
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:65:72:03:25:0f:86:51:85:84:ef:d9:e5:50:34:55:ad:f5:e6:b9
Fingerprint (sha256): b5:d8:8e:37:96:69:08:17:f6:4a:7e:b1:8e:52:1d:a3:28:83:8c:54:52:2c:32:b2:4f:92:d3:53:b1:c8:d8:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bitait.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bitait.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adormecaeemagreca.online
*.adorocancelleria.com
*.ahava.online
*.aldos.net
*.athenaquiz.com
*.betteranimes.net
*.binarybooty.com
*.bitait.net
*.bongafams.com
*.carsonnewman.com
*.cbs-radio.com
*.celebritybiomatch.pro
*.chunniwikis.com
*.collegestudentsinsurance.com
*.compasssselfstorage.com
*.compresionsale.com
*.craftplanet.co.uk
*.createdgifts.org
*.credit360business.com
*.donateclothings.com
*.downloadmii.net
*.fligtaware.com
*.goodville.cm
*.gorila.tv
*.hook-fish.com
*.jmpaudio.com
*.lalalandtoysegypt.com
*.lawinlife.com
*.lichless.org
*.margaretsbirthplace.com
*.mobile-files.us
*.mongi.com
*.mycosmeticsinsider.com
*.mysyhchrony.com
*.nintebdo.com
*.nyanicorn.com
*.openml.com
*.parknsellcars.com
*.placmentindia.com
*.remoteexeloncorp.com
*.sandboxbargrill.com
*.sareedhoti.com
*.savedtoshare.com
*.skinthrive.com
*.skyscannere.com
*.sweetpatterndays.com
*.toptecheg.com
*.uncutmast.com
*.vailletteprinting.com
*.zemani.net
adormecaeemagreca.online
adorocancelleria.com
ahava.online
aldos.net
athenaquiz.com
betteranimes.net
binarybooty.com
bitait.net
bongafams.com
carsonnewman.com
cbs-radio.com
celebritybiomatch.pro
chunniwikis.com
collegestudentsinsurance.com
compasssselfstorage.com
compresionsale.com
craftplanet.co.uk
createdgifts.org
credit360business.com
donateclothings.com
downloadmii.net
fligtaware.com
goodville.cm
gorila.tv
hook-fish.com
jmpaudio.com
lalalandtoysegypt.com
lawinlife.com
lichless.org
margaretsbirthplace.com
mobile-files.us
mongi.com
mycosmeticsinsider.com
mysyhchrony.com
nintebdo.com
nyanicorn.com
openml.com
parknsellcars.com
placmentindia.com
remoteexeloncorp.com
sandboxbargrill.com
sareedhoti.com
savedtoshare.com
skinthrive.com
skyscannere.com
sweetpatterndays.com
toptecheg.com
uncutmast.com
vailletteprinting.com
zemani.net

Other certificates including the domain name bitait.net

(limited to 100 certificates)
bitait.net
retiredsocket.top
server.bitait.net
bitait.net
bitait.net
bitait.net
server.bitait.net
bitait.net
server.bitait.net
bitait.net
bitait.net
server.bitait.net
bitait.net
bitait.net

Certificate

The complete raw certificate details for bitait.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9T25hyNM5/obJXV1/Ci3
k3k2kMtKtpMIVRzx/55SVgE7YZ0Sorke4fMpq7UaznTHsVvtHZZjOv5Ut5oa0Qqx
YkPxS3alEK4tLr8wEeN23KHha/sFf6S8TMkjdtWdx01sSCyDOnEysgq9vNVzZYH8
IuBQG6k6YAinbLZVDi8Rs2kBrvIFujg+tSkvGmFFSHJeq4tTTr0znoN26mgll1KX
Z0581lfGEVe4xSJVuzRBOl10zMfbGTsiGY8S3g0upt2hX3SqhKuL1z8JNnncxC1G
4WDtTLSZ3Nc7NJjcvYqb/Qg9NtlMDhcHgmUZuC4B5LV7NXSZLWC9YpNj8uy8IB/i
1KG61r+PAWepzRACjW7vl7LePunkCwK+yzd9gfPhyii1sMxr6iS1WcFYs5u7tfus
JOYbubcChWaJ4owemnaIj06Jd0xZPgL8/Lt+JDtHiK4+nGI8RkK4tOokB+q7byMy
omW/OTsAIx5p6edHc6+SqU8K09+34xjcvXNez6ef+Omcpva4ygvOA1kJEUH34/US
xGGZwuYO6BwCC31pVp0nkYyTEktjq2oCGbexa+8OaEYtHnMZ4nZXi0Y0WdKMGaEI
AHcjtRs02hG+Xlm14508wvetLce1qUdyNY4tL6ZCAtWhzOqQVPhRKhGtZtOHjWX/
b5wd6swg8piHo/GySg7ZT8cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398097022823253624398106205919038411011813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 01:30:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 01:30:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bitait.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1000496448543151530059973696330953114368927241639780893127930094991106232677922859029782318913478566575759078678921047948107737976597800472768906273725062414505261689591153706335919006886748490692217419204796769802414403338027126410599082030611538121461813343812194847464917721419180750621027233733332234760919013679240827168142845142892581099644672123659762129721283740583569881632784016406447449664878894868189318225062163452150463321392192090952273358558968951147578532134349030533072918155871038603412454429512471293467902976458579685002780503205761667132608163009042998478162744002509821308619019315048807277241610324053302547300367346497170898427395929019562829003756722351903041429373926846166545839169859554384526744401453603334897006035856464716793881322569390920223315055918397196430484398122470749360987751305197277920942370661329344938104482075118188597381152922409150760830494451372345125272539673086947665762863504377273121968684860387264451001071995605280791339033897064852317294939857773245953630677702403828300436068135712121602827797438165953552430650247910684497663101050374904044657808749695491307598819386161491363689209684994143434442790847863435420540931624229546286553787797664911346931263850622844907596369863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3576858a389fc6d52133066e89de53a30deaa594
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1882 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adormecaeemagreca.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adorocancelleria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahava.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aldos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.athenaquiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betteranimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binarybooty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitait.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bongafams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carsonnewman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbs-radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celebritybiomatch.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chunniwikis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collegestudentsinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compasssselfstorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compresionsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craftplanet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.createdgifts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.credit360business.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donateclothings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downloadmii.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fligtaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodville.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gorila.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hook-fish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmpaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lalalandtoysegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawinlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lichless.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.margaretsbirthplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobile-files.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mongi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycosmeticsinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysyhchrony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nintebdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyanicorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openml.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parknsellcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.placmentindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remoteexeloncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandboxbargrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sareedhoti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savedtoshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skinthrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skyscannere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetpatterndays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toptecheg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uncutmast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vailletteprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zemani.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adormecaeemagreca.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adorocancelleria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahava.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenaquiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betteranimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binarybooty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitait.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bongafams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsonnewman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs-radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebritybiomatch.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chunniwikis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegestudentsinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compasssselfstorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compresionsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftplanet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createdgifts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credit360business.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donateclothings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadmii.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fligtaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodville.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorila.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hook-fish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmpaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lalalandtoysegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawinlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lichless.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margaretsbirthplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-files.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mongi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycosmeticsinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysyhchrony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nintebdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyanicorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openml.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parknsellcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placmentindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remoteexeloncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandboxbargrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sareedhoti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savedtoshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinthrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyscannere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetpatterndays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toptecheg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncutmast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vailletteprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zemani.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d34279740000004030046304402200483602edc47dd30e4695d6daab583894d5a9ab47972c2cc87f4bb1a8be81a3f022020ed954767b4268c65e6d379fe00e3d80cb641b5b4d5cb3286d4f6b87c300f5400760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d34279887000004030047304502205ba14ea9e71ee71e37646da295f07ac806c3dac7bc86e54e1e1f6bb0c9a4eb560221008b08f31dc6eeeb5e7707ea86d5e6fedbdb884950cf2c6ae36a60b54b5871e4a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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