gaigutv.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b5:2d:20:30:61:44:96:33:b0:2c:33:c2:87:ff:b8:6f:f6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gaigutv.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:2d:20:30:61:44:96:33:b0:2c:33:c2:87:ff:b8:6f:f6
Serial Number (int): 322987948602542415458302404188010133876726
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:3d:1b:3b:ad:c8:29:0f:1a:6f:37:5a:a4:ee:10:ff:d7:9c:e0:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ba:0b:df:ab:cf:1b:a1:c9:79:b3:46:bd:4d:08:c9:39:55:2b:52:7a
Fingerprint (sha256): b6:52:8d:85:8e:ba:0d:2c:7c:f2:c0:1f:f6:28:4c:81:e3:84:57:e1:81:ff:6c:8f:06:47:10:f5:61:28:d3:8b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gaigutv.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gaigutv.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.16213.cn
*.955x.cc
*.aaronregan.com
*.activeheadphones.us
*.beatgrin.store
*.blueled.co
*.brisbanecitynews.com.au
*.brisbanelions.com.au
*.busty-torture.com
*.calibermarketinggroup.com
*.cashcarsny.com
*.dixsu.pl
*.dricompanies.com
*.firstee.org
*.gaigutv.com
*.gdm-clinic.com
*.hellwindows.cn
*.icomsex.co
*.jbpaps.com
*.jerrydamsonnissan.com
*.jerseychinastore.us
*.jizzxx.com
*.jkd-f.com
*.kkmjns.com
*.lyrics-bg.com
*.m8x6.cn
*.medijobsbd.com
*.my-wallet.biz
*.myhoorayheath.com
*.myincompayout.com
*.n26.info
*.narciss.store
*.nextcoderedweb.com
*.ocostelao.net
*.partyusmx.com
*.poleasingow.pl
*.porvhub.com
*.qualused.com
*.studiofivesixtren.com
*.superbmessage-lettertoperceivetoday.info
*.taqueriamexicolindogrill.com
*.tennislessons.au
*.tft.com.pl
*.thebattersbox.us
*.tnenvivo.com
*.totalwireless.us
*.triperna.com
*.tsl-cloud.com
*.valarstore.com
*.visanuchamchoosrigmeal.com
16213.cn
955x.cc
aaronregan.com
activeheadphones.us
beatgrin.store
blueled.co
brisbanecitynews.com.au
brisbanelions.com.au
busty-torture.com
calibermarketinggroup.com
cashcarsny.com
dixsu.pl
dricompanies.com
firstee.org
gaigutv.com
gdm-clinic.com
hellwindows.cn
icomsex.co
jbpaps.com
jerrydamsonnissan.com
jerseychinastore.us
jizzxx.com
jkd-f.com
kkmjns.com
lyrics-bg.com
m8x6.cn
medijobsbd.com
my-wallet.biz
myhoorayheath.com
myincompayout.com
n26.info
narciss.store
nextcoderedweb.com
ocostelao.net
partyusmx.com
poleasingow.pl
porvhub.com
qualused.com
studiofivesixtren.com
superbmessage-lettertoperceivetoday.info
taqueriamexicolindogrill.com
tennislessons.au
tft.com.pl
thebattersbox.us
tnenvivo.com
totalwireless.us
triperna.com
tsl-cloud.com
valarstore.com
visanuchamchoosrigmeal.com

Other certificates including the domain name gaigutv.com

(limited to 100 certificates)
gaigutv.com
gaigutv.com
gaigutv.com
gaigutv.com
gaigutv.com
gaigutv.com
gaigutv.com
gaigutv.com

Certificate

The complete raw certificate details for gaigutv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322987948602542415458302404188010133876726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 09:27:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 09:27:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaigutv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886179381013001910778304121114138710774826173113405974494671932518578206698615682700496837527583616883624229237178514699918115740616905604634534691162838595277423945870460760826073472372579216796780602788467985901887497338796274300158951761245369883933085285065716262760314274466962570499328793465200763584490917264700734222133330171706484143254744967326622136013025342317996778326993919945095000919377935131435196497063919411466208096588353704902350831116841550871331439292863525732471093302615332231870858833375498971144560071317153820356587354590069802665725718624264018747661175355415634137855510212742342363731720590632810288329583211006576593358229231585088704030502988123742924335063258639172174275546100660908728776674438791882397090196478539691361720990416677842998334703791829815277974448411679516261071262760241769141908332743038677585493824505090026872309454398811555870252318581454336036068143460176720958651040239497096777304921872717686210526547441005421806372709364197535516166768177218997295034044411031742432207921232214033796977848278450871168326857406696002235114538295552372584121385371836297922082559871376879550078791000743246084812624702860122637340543345382966183332069943207383348248432453367617799536167369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							613d1b3badc8290f1a6f375aa4ee10ffd79ce02b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1786 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.16213.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.955x.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaronregan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activeheadphones.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beatgrin.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blueled.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisbanecitynews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisbanelions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.busty-torture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calibermarketinggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashcarsny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dixsu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dricompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaigutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gdm-clinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellwindows.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icomsex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jbpaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerrydamsonnissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerseychinastore.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jizzxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jkd-f.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kkmjns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lyrics-bg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m8x6.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medijobsbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-wallet.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhoorayheath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myincompayout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.n26.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narciss.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextcoderedweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocostelao.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partyusmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poleasingow.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porvhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualused.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studiofivesixtren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superbmessage-lettertoperceivetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taqueriamexicolindogrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tennislessons.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tft.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebattersbox.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnenvivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalwireless.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triperna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsl-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valarstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visanuchamchoosrigmeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16213.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '955x.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaronregan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activeheadphones.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatgrin.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueled.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisbanecitynews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisbanelions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busty-torture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calibermarketinggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashcarsny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dixsu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dricompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaigutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdm-clinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellwindows.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icomsex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbpaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerrydamsonnissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseychinastore.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jizzxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jkd-f.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkmjns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyrics-bg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm8x6.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medijobsbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-wallet.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhoorayheath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myincompayout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n26.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narciss.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcoderedweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocostelao.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partyusmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poleasingow.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porvhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualused.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiofivesixtren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superbmessage-lettertoperceivetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taqueriamexicolindogrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennislessons.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tft.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebattersbox.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnenvivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalwireless.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triperna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsl-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valarstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visanuchamchoosrigmeal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b8f92c09000000403004830460221008301ac1278698173ba5016cb453bbecc52a625fb0a07c393aab8a8673d904de9022100860a56f98cf2d0929625834b04128353a90b0f341a4a50c2dfb50feb8b7a7fe7007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b8f92c07e0000040300463044022062a9c3b0dec6cce4a3b04f13978485243ae27bf9e23983581615810624c1560f0220739378eaa6cf89886017d1f2063d047e1692862547e0792ed3cea62c254dcd11
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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