phimnoi.com

Issued by R3

About this certificate

This digital certificate with serial number 03:53:00:13:71:fd:b2:be:9c:a3:3f:08:c5:39:8b:44:07:a3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=phimnoi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:53:00:13:71:fd:b2:be:9c:a3:3f:08:c5:39:8b:44:07:a3
Serial Number (int): 289580395215371273665158827231601676781475
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:4d:33:1b:79:96:d3:49:7c:3d:8c:e4:fa:45:b2:ed:47:08:2d:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 41:50:88:56:3d:09:67:d7:41:d9:47:ae:d4:ea:88:82:03:be:40:37
Fingerprint (sha256): bd:38:cd:0f:a9:8e:f4:24:e0:20:fc:4d:ff:1b:05:34:19:49:00:c3:8a:57:8e:e3:7f:24:5e:06:ce:80:3d:18

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate phimnoi.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for phimnoi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.arbirator-robloxnews.com
*.backpageporn.com
*.bankofmaeirca.com
*.cephied.com
*.certified-record-to-witness-today.info
*.clipartmalvorlage.com
*.criticaldepict.cyou
*.currypilort.com
*.devrywatch.com
*.dressgirl.net
*.eudhfbfpk.com
*.excogi.co
*.feqojqbylgl.com
*.ferranp.com
*.findmassmoney.cm
*.fortisphere.com
*.herbtospice.com
*.historyflex.com
*.inkstainremovers.com
*.investgo.org
*.marieclairekerr.com
*.marketruza.com
*.oddsocks.com.au
*.onlydudues.com
*.p0g0.com
*.pacificbeachvet.com
*.pgtfb.com
*.phimnoi.com
*.plushealthstore.com
*.portalmujer.com
*.portugaldownload.biz
*.preptheproject.com
*.rcsindicate.com
*.sanbdsmienbac.com
*.scotiaank.com
*.sexfug.com
*.sketchtoy.co
*.sospenis.com
*.teamscops.com
*.toodarnsoulful.com
*.uiuxdesignerkritiverma.com
*.usalizate.com
*.usatechmag.com
*.valdezeyecenter.com
*.villaagungistanabunga.com
*.viverdejoias.com
*.wikibioview.com
*.wwwdeltadentalri.com
*.xn--przi-moa.com
*.yakinchan.com
arbirator-robloxnews.com
backpageporn.com
bankofmaeirca.com
cephied.com
certified-record-to-witness-today.info
clipartmalvorlage.com
criticaldepict.cyou
currypilort.com
devrywatch.com
dressgirl.net
eudhfbfpk.com
excogi.co
feqojqbylgl.com
ferranp.com
findmassmoney.cm
fortisphere.com
herbtospice.com
historyflex.com
inkstainremovers.com
investgo.org
marieclairekerr.com
marketruza.com
oddsocks.com.au
onlydudues.com
p0g0.com
pacificbeachvet.com
pgtfb.com
phimnoi.com
plushealthstore.com
portalmujer.com
portugaldownload.biz
preptheproject.com
rcsindicate.com
sanbdsmienbac.com
scotiaank.com
sexfug.com
sketchtoy.co
sospenis.com
teamscops.com
toodarnsoulful.com
uiuxdesignerkritiverma.com
usalizate.com
usatechmag.com
valdezeyecenter.com
villaagungistanabunga.com
viverdejoias.com
wikibioview.com
wwwdeltadentalri.com
xn--przi-moa.com
yakinchan.com

Other certificates including the domain name phimnoi.com

(limited to 100 certificates)
phimnoi.com
phimnoi.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
phimnoi.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
phimnoi.com
phimnoi.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
phimnoi.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com
sni109909.cloudflaressl.com

Certificate

The complete raw certificate details for phimnoi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289580395215371273665158827231601676781475
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 08:08:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 08:08:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'phimnoi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900400737455150322765675409436233861696224489782611779498795985895491927386358082062331644171363807592004633107796595907919903482448966536314843322522512236610043625105117353681284955035048105226725708800954268746456112428019379886203918341667310450957247953802275571097509666798713861811211694422075536535989275836875983458238174970830496177977750006017708355663277077704251154887962008811862751279870355211860028603305176429584912073861930260679558284368704913040010557393413271452603385085098780722178480662977973675139365331583586714312445462289165758182565188997434418694604592314682016761695825087526473196916273835836280144805208271257336598708956486697885357083592187267616629318786729498196476501364011109813462248358099700993474148386509889830241706178308721431541682783224093054949266022467890165548921417342483956563745265167206079545017458854319905707772688969631677735455883037100340482353219091291843299216162978408391354537403833224786714258571540603823418432365580535502368229688201189039121919344184855135996408540475669013186982331091945223078953123414081928901523852507676788951609465728241347519132872842341387510855241785731812399866516610452323805864930645747740982562043651526723559239725594228142311925476611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c4d331b7996d3497c3d8ce4fa45b2ed47082dfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1898 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbirator-robloxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backpageporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankofmaeirca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cephied.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.certified-record-to-witness-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clipartmalvorlage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.criticaldepict.cyou'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.currypilort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devrywatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dressgirl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eudhfbfpk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excogi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feqojqbylgl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferranp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findmassmoney.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortisphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herbtospice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.historyflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkstainremovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investgo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marieclairekerr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketruza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oddsocks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlydudues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p0g0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificbeachvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pgtfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phimnoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plushealthstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portalmujer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portugaldownload.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preptheproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcsindicate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanbdsmienbac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scotiaank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexfug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sketchtoy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sospenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamscops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toodarnsoulful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uiuxdesignerkritiverma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usalizate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usatechmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valdezeyecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villaagungistanabunga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viverdejoias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikibioview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwdeltadentalri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--przi-moa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yakinchan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbirator-robloxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backpageporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofmaeirca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cephied.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certified-record-to-witness-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clipartmalvorlage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criticaldepict.cyou'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currypilort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devrywatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dressgirl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eudhfbfpk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excogi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feqojqbylgl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferranp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findmassmoney.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortisphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herbtospice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historyflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkstainremovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investgo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclairekerr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketruza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oddsocks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlydudues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p0g0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificbeachvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgtfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phimnoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plushealthstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalmujer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portugaldownload.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preptheproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcsindicate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanbdsmienbac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotiaank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexfug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sketchtoy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sospenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamscops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toodarnsoulful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uiuxdesignerkritiverma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalizate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usatechmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valdezeyecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villaagungistanabunga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viverdejoias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikibioview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdeltadentalri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--przi-moa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yakinchan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e6a919de80000040300473045022075912a03d6ed0144d05e96aae0eb15986529d92ec4623fda615aaf51aa1a09d3022100d88b686f01eeca786286f67a99e2264c6a056530deea257bca1b89dcb52b4b2300770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e6a91a6130000040300483046022100cbd2d045b6a2434a30c5aa6294b926aa56e54f38b31b90e37968da07acb2aea4022100991d38c4d5617d9fead569d00cfd80829dab82ef5378da737f8b63e1b59b93f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006af5fcdb4509e653b4181744d33bc5a2b9b94c23798d85987ca8bf9c32a3df8e3d07deea0dc08098b00a0e958baa3598d705ed2a21cd891f4ca17038a25c2da60c332f95e409eeb85a636a1da244184374439bb4c1c4d9d6203ba9a61015b7496f110fc5547748a0d07854c247ecae0fefc84944cbbce4f71cc760fe7a690b4cd75eaab2b55f4f0d06bcd6b2d5b791cb951064bf3ac83203eedc70927026b18341ddda1d19ce8f615cee053105d8070e478f03cfef0a9e4af782a1e9126684d550714549c3be6532305da65cd8de7aa881c4674db70d5c64487c9e8ab3bbc1393bf2a76a4760a5843b15d4e5b0fe2f690c80011689872d0353fa8233e5132d07