santasgift.shop

Issued by R3

About this certificate

This digital certificate with serial number 04:92:49:c8:b4:0c:fe:88:29:4e:05:59:d1:c4:b9:62:2a:46 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=santasgift.shop

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:92:49:c8:b4:0c:fe:88:29:4e:05:59:d1:c4:b9:62:2a:46
Serial Number (int): 398228445052425248485330169713777499580998
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3d:a5:27:d0:a1:39:9c:5c:f3:07:19:92:f9:83:3d:90:b3:2e:79:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d1:a7:ac:2f:77:36:97:51:ea:a1:1c:87:61:79:76:11:38:b9:2e:51
Fingerprint (sha256): b6:b2:96:bd:1d:da:ee:00:f2:ae:73:ee:53:94:65:4a:2c:e7:ef:ad:d4:8f:1f:4f:2c:4d:bd:79:0d:64:07:d5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate santasgift.shop

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for santasgift.shop

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adobedigitaleditions.com
*.assurncewireless.com
*.bedirt.com
*.bierbrauset.shop
*.colinskeirs.shop
*.costcocheck.com
*.customcondoms.com.au
*.faaku.net
*.familly.shop
*.fanrilla.com
*.forily.shop
*.gameora.com
*.greenfarming.com.au
*.hawaiicovid29.com
*.hentai3.com
*.ingenieriati.com
*.jbvideo.club
*.kerbodle.com
*.kk-wub.shop
*.m3m.au
*.mirko.shop
*.nordsdtrom.com
*.nuevacatedrapsicopatologia1.com
*.nursing-notes.online
*.orakai-insadong.com
*.pul.au
*.referstaffing.com
*.relany.co
*.samsung-pro.shop
*.santasgift.shop
*.seed-gallery.shop
*.serpindex.com
*.soundmover.com
*.sperd.net
*.statusappliedbank.com
*.teleofnica.net
*.thehaetford.com
*.u-k.cc
*.urbanpods.shop
*.usdepartmentofeducation.com
*.vacationstogocruises.com
*.vacationtentals.com
*.vente-telephone-portable.shop
*.ventis.shop
*.vereburn.shop
*.verka.shop
*.versaille.shop
*.victoriassecret-online.shop
*.webtor.me
*.wintersong.com
adobedigitaleditions.com
assurncewireless.com
bedirt.com
bierbrauset.shop
colinskeirs.shop
costcocheck.com
customcondoms.com.au
faaku.net
familly.shop
fanrilla.com
forily.shop
gameora.com
greenfarming.com.au
hawaiicovid29.com
hentai3.com
ingenieriati.com
jbvideo.club
kerbodle.com
kk-wub.shop
m3m.au
mirko.shop
nordsdtrom.com
nuevacatedrapsicopatologia1.com
nursing-notes.online
orakai-insadong.com
pul.au
referstaffing.com
relany.co
samsung-pro.shop
santasgift.shop
seed-gallery.shop
serpindex.com
soundmover.com
sperd.net
statusappliedbank.com
teleofnica.net
thehaetford.com
u-k.cc
urbanpods.shop
usdepartmentofeducation.com
vacationstogocruises.com
vacationtentals.com
vente-telephone-portable.shop
ventis.shop
vereburn.shop
verka.shop
versaille.shop
victoriassecret-online.shop
webtor.me
wintersong.com

Other certificates including the domain name santasgift.shop

(limited to 100 certificates)
modell-eisenbahn.shop
santasgift.shop
santasgift.shop
santasgift.shop
santasgift.shop
santasgift.shop
feemoney.com
santasgift.shop
www.santasgift.shop
santasgift.shop
modell-eisenbahn.shop
santasgift.shop
santasgift.shop
santasgift.shop
santasgift.shop
santasgift.shop
www.santasgift.shop
santasgift.shop
santasgift.shop
www.santasgift.shop
santasgift.shop
santasgift.shop
santasgift.shop

Certificate

The complete raw certificate details for santasgift.shop in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398228445052425248485330169713777499580998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 05:16:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 05:16:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'santasgift.shop'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 985715379828155090624179789001393640743171992125101029612188930196341991902864950111626982540115071820198849606356079817575903115901964273170974285207865988327201948740190788280066496218352538623315836523730393225372095716692523493180421965930812146743988486295914705305178807233273170012092152453459947189393138666943302863525012922482283699825646786482841760826726989765377445665272955214811605150582769151867240907587556746946060324452116221382354789405151828127283129164342340721181189763897526994504367880817310345564034402039933321268424138990484330105902896093142989191314520671968318827090810027781193684249832219930074946426337080529988795559351095961216858848359411406172749456084502182786140706235831250288737742410221958177385083862649565579237111018754465591492726006901745218717638628828171447049427856756817180774773927524064045180739279475994274175855796946417094010741969886549930948380112863586063875996097337383159371335645719334571639151323861516103347162553954079779778682392961480622931730919818149081001216802631172497041697523783440667142490249819464886176231568793186233216825928103313921625184300322487834981646109066156174066378283371096856163987043557789572606487479366900752789059012516351666029874464161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3da527d0a1399c5cf3071992f9833d90b32e7947
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1818 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adobedigitaleditions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assurncewireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bierbrauset.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colinskeirs.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.costcocheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customcondoms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faaku.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familly.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanrilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forily.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gameora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenfarming.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawaiicovid29.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hentai3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingenieriati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jbvideo.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kerbodle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kk-wub.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m3m.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mirko.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordsdtrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuevacatedrapsicopatologia1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursing-notes.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orakai-insadong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pul.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.referstaffing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relany.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samsung-pro.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santasgift.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seed-gallery.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serpindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soundmover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sperd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.statusappliedbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teleofnica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehaetford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.u-k.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbanpods.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usdepartmentofeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vacationstogocruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vacationtentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vente-telephone-portable.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ventis.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vereburn.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verka.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versaille.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victoriassecret-online.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webtor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wintersong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adobedigitaleditions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assurncewireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bierbrauset.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colinskeirs.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcocheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customcondoms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faaku.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familly.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanrilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forily.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfarming.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiicovid29.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hentai3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingenieriati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbvideo.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerbodle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kk-wub.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3m.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirko.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordsdtrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuevacatedrapsicopatologia1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursing-notes.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orakai-insadong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pul.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referstaffing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relany.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsung-pro.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santasgift.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seed-gallery.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serpindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundmover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sperd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statusappliedbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teleofnica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehaetford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u-k.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanpods.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdepartmentofeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacationstogocruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacationtentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vente-telephone-portable.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventis.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vereburn.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verka.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versaille.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriassecret-online.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wintersong.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d5e29158400000403004830460221009bf5ef6d60c5951bdcd2a60be085c08dca97df5297f90522827c8c4cf4fb98c2022100d9e44263d127be73a9acd8749558fda31d6ed8243ffd9448565118dae441e4ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d5e29158c0000040300473045022100c35a3c27acdce0e7438391be1969dc0650de8d5d9cd55ca8f77ac265f5ce85380220143268d9f808c3cedff873bde88fbd7e18e42d1c22ede9690d6a64351039b71b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00188b0c12abd680f7f27913f6e8086a5d55edd4e5b3c013c0e1f9d00125c15db8e6146a3f1094574c860b934d7ffa5f781a7854de3157acc0c105e0fb8fc5a315034df66069fb2f42031006e02bc5cf0bbe75ec30b1b3c732b45014c9f613292d058fc69b33604b3dd999597281687f575357aa72e26f2d15fcdcba7e6b5fc1e6aeb89ee9324361d1c244ed6bc8c956b6762ad08dd2421ebdc54af9b8dfac06374a9a19ede5f35f8e2ea20d27d0b727f92d4ed9e8731ef19585303c7306f9fda09517b177ed8322be5d89d0c1117f35d933d2cf2266e246392739c45ead5d7e8f0cd23b8a2922497a310f2b5b51e6af64d233fb617a7516127ffe23c2ded93ec3