totkik.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a5:3b:6e:be:e7:d9:10:5a:5c:7a:4d:91:b0:96:15:9f:49 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=totkik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:3b:6e:be:e7:d9:10:5a:5c:7a:4d:91:b0:96:15:9f:49
Serial Number (int): 317562447813668043530144656726341765668681
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:81:19:eb:3b:cc:99:53:9e:a9:af:94:20:b5:c5:33:4a:3f:27:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 65:cc:50:eb:45:b6:77:e3:32:6a:33:89:fe:7a:eb:9b:b7:6f:9c:06
Fingerprint (sha256): bc:ae:6d:cd:5b:85:c2:b4:9e:05:a2:97:6c:38:a8:53:f7:33:22:6f:06:31:f3:69:64:2a:2e:7b:11:93:57:2d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate totkik.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for totkik.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aceairco.com
*.acengcorporation.com
*.anitrack.uk
*.arrowpathvc.com
*.banayedanesh.com
*.biafmedia.com
*.chilltowncollectibles.com
*.cimaflash.co
*.cuimunhs.org
*.dsaiugbgfc8pp.com
*.ecointermodal.net
*.ecommglobalconsulting.com
*.electrolcommission.org.uk
*.forexbetting.com.au
*.futebolplyhd.com
*.gamblingbetting.com.au
*.getfvd.com
*.getvero.co
*.greyhoundracingbetting.com.au
*.greyhoundsracing.com.au
*.hilangderita.com
*.houmacar.com
*.indoreeducationhub.com
*.infografiasbaratas.com
*.jczx12635.xyz
*.keygenznov.com
*.lavaldiris.com
*.legalgambling.com.au
*.marketingnxs.com
*.mijrijbewijs.eu
*.muirburnhouse.co.uk
*.nastyrat.tv
*.ns-passion.com
*.orderqueloqueny.com
*.outdoorgadget.net
*.pro-ran.com
*.racingtrack.com.au
*.robloxn.com
*.segugeschichte.de
*.sportsbettingbonus.com.au
*.sunrainfireplace.com
*.thoitrangodcvn.com
*.tilestorepa.com
*.torontodomainer.com
*.totkik.com
*.trimsixeof.be
*.twinflameguidance555.com
*.urbansurvivalguy.com
*.various.au
aceairco.com
acengcorporation.com
anitrack.uk
arrowpathvc.com
banayedanesh.com
biafmedia.com
chilltowncollectibles.com
cimaflash.co
cuimunhs.org
dsaiugbgfc8pp.com
ecointermodal.net
ecommglobalconsulting.com
electrolcommission.org.uk
forexbetting.com.au
futebolplyhd.com
gamblingbetting.com.au
getfvd.com
getvero.co
greyhoundracingbetting.com.au
greyhoundsracing.com.au
hilangderita.com
houmacar.com
indoreeducationhub.com
infografiasbaratas.com
jczx12635.xyz
keygenznov.com
lavaldiris.com
legalgambling.com.au
marketingnxs.com
mijrijbewijs.eu
muirburnhouse.co.uk
nastyrat.tv
ns-passion.com
orderqueloqueny.com
outdoorgadget.net
pro-ran.com
racingtrack.com.au
robloxn.com
segugeschichte.de
sportsbettingbonus.com.au
sunrainfireplace.com
thoitrangodcvn.com
tilestorepa.com
torontodomainer.com
totkik.com
trimsixeof.be
twinflameguidance555.com
urbansurvivalguy.com
various.au

Other certificates including the domain name totkik.com

(limited to 100 certificates)
totkik.com
totkik.com
totkik.com
totkik.com
totkik.com
totkik.com
www.totkik.com
totkik.com
totkik.com
totkik.com
totkik.com
*.3shroon.com
totkik.com
totkik.com

Certificate

The complete raw certificate details for totkik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317562447813668043530144656726341765668681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 15:19:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 15:19:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'totkik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692914558194232391693145176066741044980302425990990853139123112130398570753741021835260252298982457743016949100661764556783675821041856960489969918462884379388624454884652532824366022995025464490459542362975069704313341061490586371282971876124030576988867071137128083604388214490261191340675906253797976875562301658028959398111451952752303813780672018847357028407890531529723457880005233606719224747124635574285784727052167385492574580335686798457917838948263771035451435906728550991496180962530540888962635715553114471014409753558601062911113000049312961493319172059318947359019041274469922817060187780538957094778554088974371958179146119268089659019500428658167855382122350608875595666525988736915618671941950195276365302995024284301475482316847075563698441282365331313068067518470801629727434926499002394949655279963727790217130332481582217572138599163522487465034365992585554176808533407938651073048904584439911757731474463392345501002886620826208468006085462046797419227252704416983677919669866353954543521840641701337245751697369998605972891611755687880188670132974926703956280084301504977230634226940754501952512452581960071307188811686506703481972944747752670179052228768965025616666222446947204640763113074658798442272678129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b28119eb3bcc99539ea9af9420b5c5334a3f2769
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1946 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aceairco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acengcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anitrack.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arrowpathvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banayedanesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biafmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chilltowncollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cimaflash.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuimunhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsaiugbgfc8pp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecointermodal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecommglobalconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electrolcommission.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forexbetting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.futebolplyhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamblingbetting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getfvd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getvero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greyhoundracingbetting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greyhoundsracing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hilangderita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houmacar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indoreeducationhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infografiasbaratas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jczx12635.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keygenznov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavaldiris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legalgambling.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketingnxs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mijrijbewijs.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muirburnhouse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nastyrat.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ns-passion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orderqueloqueny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outdoorgadget.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pro-ran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.racingtrack.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robloxn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segugeschichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsbettingbonus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunrainfireplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thoitrangodcvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tilestorepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torontodomainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totkik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trimsixeof.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twinflameguidance555.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbansurvivalguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.various.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceairco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acengcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anitrack.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowpathvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banayedanesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biafmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilltowncollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimaflash.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuimunhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsaiugbgfc8pp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecointermodal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecommglobalconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electrolcommission.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexbetting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futebolplyhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamblingbetting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getfvd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getvero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greyhoundracingbetting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greyhoundsracing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilangderita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houmacar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indoreeducationhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infografiasbaratas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jczx12635.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keygenznov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavaldiris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalgambling.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingnxs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijrijbewijs.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muirburnhouse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nastyrat.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-passion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderqueloqueny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoorgadget.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-ran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racingtrack.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robloxn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segugeschichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsbettingbonus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrainfireplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoitrangodcvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilestorepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torontodomainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totkik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimsixeof.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinflameguidance555.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbansurvivalguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'various.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b05c9bc320000040300473045022100ea3e8932e26fe150d1e20f647bdda7f12af2fda65f0487c05253b142f6ecfe5a022079ed3d828609fb6e2d3c39371559ec053da951f26c786df279fe91256453ae4c007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b05c9bc5b0000040300483046022100d5b9ce765b39c43934bea824db80d2f74d5802a9761fc0e81ea3dcb85080c1870221009cb61eff02e32298b451c7ce9a3f95ab487fe18b999965b21f80556a68737213
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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