urgen.com

Issued by R3

About this certificate

This digital certificate with serial number 03:62:a8:3c:83:10:10:3d:f5:62:99:17:c5:15:24:3d:58:8b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=urgen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:62:a8:3c:83:10:10:3d:f5:62:99:17:c5:15:24:3d:58:8b
Serial Number (int): 294908154252904422657615755128677471180939
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:58:15:2b:19:3e:f4:47:49:ea:76:81:18:f8:e7:1a:4b:a1:2a:15
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fe:0d:66:45:66:c7:bd:22:83:79:72:d1:5d:23:4d:45:4f:f0:1e:f6
Fingerprint (sha256): c1:a1:f8:56:96:5a:39:e5:e8:e3:5e:3c:51:99:06:5a:52:a4:4c:04:65:cc:fd:a6:d6:0a:71:7f:61:bc:d5:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate urgen.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for urgen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.accpubg.com
*.amazonshikujiri.net
*.catfishcorner.co
*.cedarandseapicnics.com
*.chequebooks.com.au
*.compracasa.es
*.conda.net
*.dahuja.com
*.dzanic.com
*.eastiesmokeshop.com
*.elephanttrunkfurniture.com
*.enchr.com
*.eopu.com
*.farrali.com
*.free-gay-games.com
*.gongchengjixie.com
*.hlm123.cc
*.hurla.com
*.inboundagencyleads.com
*.iptvxxx.com
*.islandspicecan.com
*.joegarden.com
*.kbhames.com
*.longboxes.com
*.mechancisbank.com
*.midwesternbaptistcollege.com
*.mundofalso.com
*.mykonoabq.com
*.mymetergysolution.com
*.newyorkpost.cm
*.obour.com
*.peraga.com
*.picapalpetstore.com
*.profit-line.biz
*.quanwai.com
*.recantodaterra.com
*.socialmotto.com
*.soldierdesingersfleeks.com
*.soney.es
*.telao.com
*.tensostrutture.com
*.thenewagestore.com
*.theswagg.com
*.thisisyourtime.com
*.totees.com
*.tufundacion.com
*.urgen.com
*.wachildcaretraining.com
*.wayuubags.co
*.westernmutual.cm
accpubg.com
amazonshikujiri.net
catfishcorner.co
cedarandseapicnics.com
chequebooks.com.au
compracasa.es
conda.net
dahuja.com
dzanic.com
eastiesmokeshop.com
elephanttrunkfurniture.com
enchr.com
eopu.com
farrali.com
free-gay-games.com
gongchengjixie.com
hlm123.cc
hurla.com
inboundagencyleads.com
iptvxxx.com
islandspicecan.com
joegarden.com
kbhames.com
longboxes.com
mechancisbank.com
midwesternbaptistcollege.com
mundofalso.com
mykonoabq.com
mymetergysolution.com
newyorkpost.cm
obour.com
peraga.com
picapalpetstore.com
profit-line.biz
quanwai.com
recantodaterra.com
socialmotto.com
soldierdesingersfleeks.com
soney.es
telao.com
tensostrutture.com
thenewagestore.com
theswagg.com
thisisyourtime.com
totees.com
tufundacion.com
urgen.com
wachildcaretraining.com
wayuubags.co
westernmutual.cm

Other certificates including the domain name urgen.com

(limited to 100 certificates)
gyanism.com
reciprocidad.com
urgen.com
urgen.com
urgen.com
urgen.com
urgen.com
evanmueller.com
stoil.com
urgen.com
acurafinance.com
urgen.com
nguyenkhang.com

Certificate

The complete raw certificate details for urgen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs5J5gQuH71YlgRijvnFo
p9EvQ5WehaFif5ctBivaID5FwMv/GpKtnBdv27e27hxVUw8V/S+V9p0ftJOAWMAI
TDywoOexKejcXGNrOkDk3xgUXa3Nd+Yhv3hqzUkuw+KDSdHJ1c3XQhK1eniVGa9U
fCh82O1fqqaItrZVNRS2wxmvujZnBImIUGTkJHLio/wHLSfwgrB9U9qb9axZMrdZ
cMhl1lgUXVew5mqwPVlGXs+YVspGOjFt224t8i3pDf2gits1cZidX1K3UI30bjJh
NMUX+7kIHRG0R/YsYv+wwuETAAN0pwgty9K3/qyaSkQAJyVNenIsRrJoJAQzqsCZ
8qi61eKEaZFYAZJ3jGH8vmEy6xDd/FEuQujotpCirAki2IJ9a4vk34l2Nb0t7QXL
Z/OrFyPYRjDL1Km0xvqmhPxpTTs5P4Nvp+1LRrEwN4uc285wrffWDr1WWYE8Tsvz
iICZceBMsdK/F20pe5j6snDIsrXK2T/sZv/QsH6wdmLaQFUYSvMH+hw4f7O2snIE
rjsls53ADe50HwyOXhBvvEOjDmR2vFisMp6Zopy66Qjd5AfuLjtwUhcUg+MdBeGy
eVbk70CekJ8xkEZQoGqtK5muaz+bGundRSr9oWBEFruG0HXCbaWyYZGCjZw960cI
ImxDyMqwBGckDPvEMIsCt90CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294908154252904422657615755128677471180939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 09:23:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 09:23:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'urgen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732590523864300601834349834105875878947339006156696390305162841493300892405085029720620255565201336737233714260404190462709365574427569229280855851025559684928854066660833934064991361894670513191779582253897589171877602957785957753992000750243587343787539032798674163763923751111707286558019634208941865651300669879633115189751624221890427288425202733386833665990207360711938497023409431675454103980038381172398496518469183517905829035123880855057773122417969989611926071920314337089120924701204689182862866903332974017329266910332922050353695123757764506669800462544443808499781943363718060077740331851608153271841841388234242430544623209991747970133369286127661878716744116122360307078960567308280426916826812685863033709088599604021819117094997287444923325133302530610900768774730256700526546855682639140088129658608719086670255055063473485196703268722845086719789697961997581656334725624128491220962919324973785427573840410424622783857657685440412681086244163917709454968014978024944908049429299410724171205891408011848014056257598804176867090993317493165874505077968139382131448553830029872441339943075046754255091707952868722390290696951175213266066262354415780555133943891404570715216468253057832742050737104586728278535092189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f58152b193ef44749ea768118f8e71a4ba12a15
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1786 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accpubg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazonshikujiri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catfishcorner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cedarandseapicnics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chequebooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compracasa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dahuja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dzanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastiesmokeshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elephanttrunkfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enchr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eopu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farrali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.free-gay-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gongchengjixie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hlm123.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hurla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inboundagencyleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iptvxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.islandspicecan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joegarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kbhames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longboxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mechancisbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midwesternbaptistcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundofalso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mykonoabq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymetergysolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newyorkpost.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peraga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picapalpetstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profit-line.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quanwai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recantodaterra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialmotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soldierdesingersfleeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soney.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tensostrutture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thenewagestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theswagg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thisisyourtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tufundacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wachildcaretraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wayuubags.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westernmutual.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accpubg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonshikujiri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catfishcorner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cedarandseapicnics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chequebooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compracasa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dahuja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastiesmokeshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elephanttrunkfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enchr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eopu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farrali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'free-gay-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gongchengjixie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlm123.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundagencyleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptvxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islandspicecan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joegarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbhames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longboxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechancisbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwesternbaptistcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundofalso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mykonoabq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymetergysolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkpost.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peraga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picapalpetstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profit-line.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quanwai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recantodaterra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialmotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soldierdesingersfleeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soney.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tensostrutture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenewagestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theswagg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisisyourtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tufundacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wachildcaretraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayuubags.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernmutual.cm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bcd5b1cde0000040300473045022100cb7ea283a3ac21abe45f6a113789198a09addf8f1c9434bb2403973a6073092602206484b7ded4e8b63350ee29c9a7d3c7f836940d60d0ac619b3c5df4bd07d585240077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcd5b1cf000000403004830460221009a82a35fa45ec876293352b4ec6bc2154e309ef001e277e5e1916deae924cdab022100b44b3ccc1aa5f1f44e862c6f760a236cd17285b703f7ee57a00896bd3ee7e20d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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