leighfallon.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c3:23:88:aa:c0:e9:6e:03:a2:3e:e6:ed:e8:62:7c:c9:5f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leighfallon.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c3:23:88:aa:c0:e9:6e:03:a2:3e:e6:ed:e8:62:7c:c9:5f
Serial Number (int): 414851437872142902583774020313358503037279
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 13:05:e5:a4:e1:08:a2:d7:22:4e:04:6b:0e:d7:5a:88:db:c1:31:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:47:bd:15:de:84:6b:74:93:0e:73:7f:53:f9:2a:92:2c:45:5f:43
Fingerprint (sha256): c2:ea:80:36:5e:6f:f9:78:e3:72:41:f7:20:7d:83:3c:82:dd:21:3e:01:28:d5:2b:fc:6a:a6:af:c6:ec:21:6f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leighfallon.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leighfallon.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4ox.xyz
*.702.co.in
*.alff.com
*.athenatools.xyz
*.beauty-in-health.net
*.behie.com
*.beneficiosbancoguayaquil.com
*.betrovers.com
*.brennerdrainageexcavatinginc.com
*.cclunuo.com
*.compilation.au
*.dacr33ossoptimism.top
*.detan.com
*.downloada.net
*.ee1ee.com
*.etfplus.net
*.fairfieldhonda.com
*.jala3.com
*.kabati.com
*.la-photo-en-faits.com
*.ladysuspender.co.uk
*.leighfallon.com
*.maxcoach.com
*.mazinworld.com
*.medum.com
*.metacarsnft.com
*.monoscopefilms.com
*.moodis.com
*.mtvalley.com
*.onebigtweet.com
*.onlinessmusix.com
*.pero.au
*.plurarlsight.com
*.pupil.com.au
*.puzzelhome.com
*.r-dmotorsports.com
*.rubat.com
*.sabinomuebles.com
*.sauris.com
*.somuga.com
*.tarambana.com
*.teammicrosoft.com
*.thehydrant.com
*.tjjtv.info
*.unixmanga.net
*.v2nae5pkinboy.top
*.v2swe5allowjoin.top
*.wordsinspired.com
*.wwwtuftsmedicarepreferred.org
*.xxtwiter.com
4ox.xyz
702.co.in
alff.com
athenatools.xyz
beauty-in-health.net
behie.com
beneficiosbancoguayaquil.com
betrovers.com
brennerdrainageexcavatinginc.com
cclunuo.com
compilation.au
dacr33ossoptimism.top
detan.com
downloada.net
ee1ee.com
etfplus.net
fairfieldhonda.com
jala3.com
kabati.com
la-photo-en-faits.com
ladysuspender.co.uk
leighfallon.com
maxcoach.com
mazinworld.com
medum.com
metacarsnft.com
monoscopefilms.com
moodis.com
mtvalley.com
onebigtweet.com
onlinessmusix.com
pero.au
plurarlsight.com
pupil.com.au
puzzelhome.com
r-dmotorsports.com
rubat.com
sabinomuebles.com
sauris.com
somuga.com
tarambana.com
teammicrosoft.com
thehydrant.com
tjjtv.info
unixmanga.net
v2nae5pkinboy.top
v2swe5allowjoin.top
wordsinspired.com
wwwtuftsmedicarepreferred.org
xxtwiter.com

Other certificates including the domain name leighfallon.com

(limited to 100 certificates)
eegee.com
alicekass.com
eegee.com
30week.com
alicekass.com
linevidesoddmrali.xyz
linevidesoddmrali.xyz
37thtechnologies.in
leighfallon.com
leighfallon.com
30week.com
leighfallon.com

Certificate

The complete raw certificate details for leighfallon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414851437872142902583774020313358503037279
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 08:11:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 08:11:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leighfallon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722100433570985223808227296676899182000308145006302305943683822887644161015953730662406913568545373637638412197054609983815869263167139964230975015067561303352530221816558170766786012304357058519782542767500363488267330738300336727413739459062218141726705241839686132343113936385161657267339704066531448067752170409931732618487965126400364431498050108234672695274333965827994019809116482026795339161702025415070557818400148392936988738506156405468884562860333754743594922630106474933483682272606933842034304081467775216405440727829611951581601467054345043225961754378822943719961835795484047103514402159287581283496626466720028681493164588546727506442577138916973637504952322276649334677043009702322334380360888222662405087930910398900691524205211013195555706005547099590845479270111798507905463840027155741610285137238931111120110912197117602479357776530899346800526111270614855955485010352049321608206931468340286904534991158041971283291544192261408456383978506004931989566448260652233732553574633094504503122392269371695316569311406953561966874118037603240628449774030658345766706090622883562903053411347935358786127119237996775525430067336548584447858889888309117433302666410989910747905731019948445807520977752771327042365039351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1305e5a4e108a2d7224e046b0ed75a88dbc1316f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1738 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4ox.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.702.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.athenatools.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beauty-in-health.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.behie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beneficiosbancoguayaquil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betrovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brennerdrainageexcavatinginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cclunuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compilation.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dacr33ossoptimism.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.detan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downloada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ee1ee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etfplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairfieldhonda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jala3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kabati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.la-photo-en-faits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ladysuspender.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leighfallon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mazinworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metacarsnft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monoscopefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moodis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onebigtweet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinessmusix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pero.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plurarlsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pupil.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puzzelhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r-dmotorsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabinomuebles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sauris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somuga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarambana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teammicrosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehydrant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tjjtv.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unixmanga.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2nae5pkinboy.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v2swe5allowjoin.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wordsinspired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwtuftsmedicarepreferred.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxtwiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4ox.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '702.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenatools.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beauty-in-health.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'behie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneficiosbancoguayaquil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betrovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brennerdrainageexcavatinginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cclunuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compilation.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacr33ossoptimism.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee1ee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etfplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairfieldhonda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jala3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-photo-en-faits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladysuspender.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leighfallon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazinworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metacarsnft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monoscopefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moodis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onebigtweet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinessmusix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pero.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plurarlsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pupil.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puzzelhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r-dmotorsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabinomuebles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sauris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somuga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarambana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teammicrosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehydrant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjjtv.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unixmanga.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2nae5pkinboy.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2swe5allowjoin.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordsinspired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwtuftsmedicarepreferred.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxtwiter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d02170a0a0000040300463044022007d0b3812473fd3a6e4d60d6eea27d8bc287937b4503d97cd03101c98cdb8a0b02203d5cacf03d68a72f54e49e30b2264206f7efa264ce8319abed440d914f2dbcff007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d02170a17000004030047304502200d5473aefabcaf78b1d4daed215abd54b7a05e8ce559bf87e0151c6fd8a2c413022100ebc8c4c0d77002d2ceede5afc9c060d968ae3d562f5add63943f35eaca60335e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00384e2d3f1d84984f3e5ce63e32cec17495015953f73d8d319592a64af5f9f37d4be18fa9c26a66bc1b41fb98daf6d15c85b7f9415b81a1828cf41034318208328a01be49c3bac7fcbfc0d1f8f47ffc45e1714852cddd72b981f20d6e5fd4209e70931801e9e50c2d192660739e47e2bf5b3f9a758176e2e0abc8ac0287169521d5651cf6f9c45bcc011be62f393325e469f758d77a1feca20ac294040236abd2ccf0400477947656d673693d55a88b2cba7ce3aa93a5bd9afba53c6cca4d59d4ec38665785121f7f6a0c8a40c369bce2350f47c160afb7d84b6d8712de3fad6737f1e32c80261fd8c2f5c5ee253f8b287750dea5956d3a6f7d3b45fdfcbb0cbb