ricohusacsod.com

Issued by R3

About this certificate

This digital certificate with serial number 04:28:47:ff:ae:41:41:c3:ba:f2:36:14:bd:04:4c:14:91:ca was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ricohusacsod.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:28:47:ff:ae:41:41:c3:ba:f2:36:14:bd:04:4c:14:91:ca
Serial Number (int): 362156141161587635280871250704798949085642
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 77:69:ad:b2:7d:3e:fe:d7:75:c9:be:b9:9b:e5:1b:98:96:42:d9:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:b0:05:aa:16:14:ff:36:04:9a:fe:0a:df:df:9d:13:0b:69:93:5f
Fingerprint (sha256): c3:b7:8b:cf:1b:bc:00:95:8b:7f:95:58:a5:66:8d:db:f3:0d:10:f8:0c:c1:37:b1:e9:2c:b9:82:72:d2:2a:ab

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ricohusacsod.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ricohusacsod.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.anoodlemagazine.com
*.autohrvafska.com
*.bbcniggasinmyballs.com
*.bebasimdo.co
*.bitchosgirls.com
*.bjtdfc.com
*.bkbmaomsdsn.com
*.brightstar.com.au
*.bx-games.com
*.caridadmartin.com
*.citycab.com.au
*.clubspin.com
*.copitalone.com
*.dnnerpyjsma.com
*.drven.com.au
*.emozihabify-coxisohood-anticopifation.info
*.fullertonchild.com
*.funomation.com
*.groometransportations.com
*.haifahaircompany.com
*.industrialgroupco.com
*.iventurasdevelopment.com
*.janen.com
*.klogitech.com
*.klokan.com
*.lauttawaferniming.com
*.makemegenuis.com
*.meidbypass.com
*.oceanswimusa.com
*.p9rhub.com
*.papos.com
*.phosamnoodlehouse.com.au
*.pinkzebrahome.co
*.policygenuius.com
*.porngameahub.com
*.portablesermons.com
*.pya.com.au
*.ricohusacsod.com
*.romwey.com
*.sanguorgio.com
*.saufi.com
*.sbicardlogin.com
*.shetek.com
*.shoptsunamiglassworks.com
*.socialops.com
*.startupfounders.com.au
*.wickedlyfastwifi.com
*.wowfun.com
*.yourcareertest.com
*.z9om.com
anoodlemagazine.com
autohrvafska.com
bbcniggasinmyballs.com
bebasimdo.co
bitchosgirls.com
bjtdfc.com
bkbmaomsdsn.com
brightstar.com.au
bx-games.com
caridadmartin.com
citycab.com.au
clubspin.com
copitalone.com
dnnerpyjsma.com
drven.com.au
emozihabify-coxisohood-anticopifation.info
fullertonchild.com
funomation.com
groometransportations.com
haifahaircompany.com
industrialgroupco.com
iventurasdevelopment.com
janen.com
klogitech.com
klokan.com
lauttawaferniming.com
makemegenuis.com
meidbypass.com
oceanswimusa.com
p9rhub.com
papos.com
phosamnoodlehouse.com.au
pinkzebrahome.co
policygenuius.com
porngameahub.com
portablesermons.com
pya.com.au
ricohusacsod.com
romwey.com
sanguorgio.com
saufi.com
sbicardlogin.com
shetek.com
shoptsunamiglassworks.com
socialops.com
startupfounders.com.au
wickedlyfastwifi.com
wowfun.com
yourcareertest.com
z9om.com

Other certificates including the domain name ricohusacsod.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ricohusacsod.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362156141161587635280871250704798949085642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 03:32:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 03:32:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ricohusacsod.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 942804378443436995458093105112029072358699080035271701696020972627009275941921040394904469203388650761160439469512410288799446504855437012495062872732457346944301763540361725394346891664913191316772062832380820227075353463548288683632228556032786558770073622921170223122381130365058433035753813195795427893103303100112338784109583039724567905237250425749323212161418258432354997358836467731649490085994750829665377326144771433182242116936681399250208839880396227305003701720865032565668377453397809247171092745218967374969409873317378018446235278088928395718785992463195830116555776213948801459744657679557000787102293362068746778285491689225949303199892996199174375633436050935728391403138483423710161897908160318109305299790646490069986526244680356952078079329362763491665731092360280495456890864718344254166535214211130803002737436163432960561179037425163511883521298545842589862810964648615924511497358071957601484536852867782705163421504534002895205666589069126588483734342252086045377817988603920657202702459263657608228360385952950036248179524646658402476544723974125887184022749221106757763820424230131658526538000731447224931125334231537481145949124077060165472585053577698782488450804102123027022852252336239585442468665921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7769adb27d3efed775c9beb99be51b989642d9e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1900 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anoodlemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autohrvafska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbcniggasinmyballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bebasimdo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitchosgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bjtdfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bkbmaomsdsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brightstar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bx-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caridadmartin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citycab.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubspin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copitalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnnerpyjsma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drven.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emozihabify-coxisohood-anticopifation.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullertonchild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funomation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groometransportations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haifahaircompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.industrialgroupco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iventurasdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klogitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klokan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lauttawaferniming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makemegenuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meidbypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oceanswimusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p9rhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phosamnoodlehouse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinkzebrahome.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.policygenuius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porngameahub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portablesermons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pya.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ricohusacsod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.romwey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanguorgio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saufi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbicardlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shetek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoptsunamiglassworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startupfounders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wickedlyfastwifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wowfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourcareertest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z9om.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anoodlemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohrvafska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbcniggasinmyballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bebasimdo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitchosgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjtdfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkbmaomsdsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightstar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bx-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caridadmartin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycab.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubspin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copitalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnnerpyjsma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drven.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emozihabify-coxisohood-anticopifation.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullertonchild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funomation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groometransportations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haifahaircompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrialgroupco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iventurasdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klogitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klokan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lauttawaferniming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makemegenuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meidbypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanswimusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p9rhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phosamnoodlehouse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkzebrahome.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policygenuius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porngameahub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portablesermons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pya.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricohusacsod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romwey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanguorgio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saufi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbicardlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shetek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoptsunamiglassworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startupfounders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wickedlyfastwifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourcareertest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z9om.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ca98c0d870000040300483046022100d7831236b3648cc2155443649ab355b2a65926fb4f592000ad3beafdf1733d23022100cc19dd09e53796d8067c72346adc321dbf180ac5a11dbea896ac31422aa8f531007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ca98c0d8f0000040300483046022100db4a6744f08f51263cadddafb9a4e4c6b16d25629eff662a9c12cf93f02146420221009577e242b77dc9c88b07da35fa039ec17dfa19eed50c61ad9cb228d01676972b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ab437a51f2e2a180035936275dfd9be1f5582261b8a80ab992cce7ac345c92be4eda119ef7c5417b06eda4d8744b1abf526229265907ba57dc32df98d570cb4c61f476bb9e8d95f792450f36f52979a6e855d49ed98952c2b4da077d12120d29fe4255109bf4c19ae47c3122a680622f5d8fe7391d70ea5c44fa4bb1ca40949e9176cfb4ba3873dc0aef319915e5ebfb00083b83d7a1229816f6c98ae1d412b0f1fd03477380ad51a2a52a9100adbbed42609fc66c16747cc0b8f2722b230da2e0068e0edd12f9c1d84666bbc2a7124e359648c583d3b33d5941d6821ab807aebbc21072c9e992c78bbc209b9eee138c90b94fe10a548189da9d2dd6b243eee5