klingers.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6d:a9:60:63:51:1f:73:01:4b:e9:39:e9:f5:ba:9c:18:a2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=klingers.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:a9:60:63:51:1f:73:01:4b:e9:39:e9:f5:ba:9c:18:a2
Serial Number (int): 298652775795834867576419791742960179878050
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:45:79:1c:44:75:d4:10:e0:38:5a:9b:79:c4:9d:7f:8a:7a:2d:09
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:c6:d0:63:21:6e:44:e5:73:d7:48:56:86:30:eb:f2:e7:5d:de:46
Fingerprint (sha256): c9:2f:4c:34:b2:d3:dd:27:45:a7:68:bf:68:03:15:8d:0e:38:6b:4f:3c:54:af:be:d8:c1:88:18:d1:5e:5d:ae

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate klingers.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for klingers.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.7kidscraftstore.com
*.aann8.com
*.altomayo.com
*.batteriesincluded.com.au
*.belize.com.au
*.blodhorse.com
*.brushline.com
*.canceranswers.science
*.cantrall.com
*.clinicaprosalud.com
*.dizaininterierov.info
*.domainnameaffiliateprograms.com
*.domainnamecheap.com
*.emakemak.com
*.engakuji.com
*.fastpeeoplesearch.com
*.fitnesswatches.com.au
*.funeralsolutions.com
*.guardianlie.com
*.harrispolls.com
*.icivis.com
*.kaisergirls.com
*.klingers.com
*.larroca.com
*.lauderdaleairport.com
*.librosperdidos.com
*.maniya.com
*.marite.com
*.meine-vbl.de
*.mengxiu.com
*.mybluchers.com
*.nackte--frauen.com
*.nyamachoma.com
*.orthoplace.com
*.phoneinorderplease.com
*.pistons.com.au
*.positioniseverything.com
*.purenjoys.com
*.retrogamescorps.com
*.sbsseguros.co
*.sharp-hotline.com
*.shewa.com
*.sneakerbox.com.au
*.soulsradio.com
*.supertf.com
*.thetruestory.info
*.tunnelmonkeys.com
*.ucreditunion.com
*.waterlabels.com
*.wolpa.com
7kidscraftstore.com
aann8.com
altomayo.com
batteriesincluded.com.au
belize.com.au
blodhorse.com
brushline.com
canceranswers.science
cantrall.com
clinicaprosalud.com
dizaininterierov.info
domainnameaffiliateprograms.com
domainnamecheap.com
emakemak.com
engakuji.com
fastpeeoplesearch.com
fitnesswatches.com.au
funeralsolutions.com
guardianlie.com
harrispolls.com
icivis.com
kaisergirls.com
klingers.com
larroca.com
lauderdaleairport.com
librosperdidos.com
maniya.com
marite.com
meine-vbl.de
mengxiu.com
mybluchers.com
nackte--frauen.com
nyamachoma.com
orthoplace.com
phoneinorderplease.com
pistons.com.au
positioniseverything.com
purenjoys.com
retrogamescorps.com
sbsseguros.co
sharp-hotline.com
shewa.com
sneakerbox.com.au
soulsradio.com
supertf.com
thetruestory.info
tunnelmonkeys.com
ucreditunion.com
waterlabels.com
wolpa.com

Other certificates including the domain name klingers.com

(limited to 100 certificates)
wwwdejanews.com
belize.com.au
klingers.com
grupoviptemporadalitoral.com
guerrin.com
womenapex.com
ranwala.com
www.ibaadat.com
futuretechnician.com
icivis.com
klingers.com
klingers.com
dormiu.ai

Certificate

The complete raw certificate details for klingers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298652775795834867576419791742960179878050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 08:13:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 08:13:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'klingers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753388179031011602715176270356885617546624729804182525992777821446993897089845160953684252067921468029136260790491888878601609230590419749219392541323801862283869694229223274912000885798018338801850666973627673592581136836460053836013477231772079092886001404705115771465669093137669843069337957630179883248066837548048355623038025273351067698871416090058180110009301829182807641891550591930554008878619881166008046610582351164414214248952300204237798373314287382217766360117186012220160333063148493548481543117355268860712469020222723267405081055689717843128770719994158056423165499624534570954088584197933613059841427551012612239922452426632814142182876665666786408558120503404466586272918197684604279400956621500528013682396633081912278592431878334700083735762597274305362694621162193792956524075277139740232054311195483937134664227967990875981383622414343750411438654841527649250898571308146289191667901596835731409150423762866121409391473598593917748109100147282371143921200831756812639457053031739183474428710725560839181559395918527700857216271547737192581809960310319632095870334129741448583366490083862951925179586014766455745445773840841852843006934315151793062942388700394490946566577318709828660317014582201806829568449597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7145791c4475d410e0385a9b79c49d7f8a7a2d09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1862 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7kidscraftstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aann8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altomayo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batteriesincluded.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belize.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blodhorse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brushline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canceranswers.science'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cantrall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinicaprosalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dizaininterierov.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainnameaffiliateprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainnamecheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emakemak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engakuji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastpeeoplesearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitnesswatches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funeralsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardianlie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrispolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icivis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaisergirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klingers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larroca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lauderdaleairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.librosperdidos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meine-vbl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mengxiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybluchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nackte--frauen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyamachoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orthoplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phoneinorderplease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pistons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.positioniseverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purenjoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retrogamescorps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbsseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharp-hotline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shewa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sneakerbox.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soulsradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supertf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetruestory.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tunnelmonkeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ucreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterlabels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7kidscraftstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aann8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altomayo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batteriesincluded.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belize.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blodhorse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brushline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canceranswers.science'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantrall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicaprosalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dizaininterierov.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainnameaffiliateprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainnamecheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emakemak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engakuji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastpeeoplesearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnesswatches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funeralsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guardianlie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrispolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icivis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaisergirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klingers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larroca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lauderdaleairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'librosperdidos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meine-vbl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mengxiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybluchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nackte--frauen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyamachoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthoplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoneinorderplease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pistons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'positioniseverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purenjoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retrogamescorps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharp-hotline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shewa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sneakerbox.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulsradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supertf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetruestory.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunnelmonkeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterlabels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolpa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bcd1bb222000004030046304402201ffea75728dd74451a86cfd434c7222157e111f9ca428a496e764201a21a7a7c02206f2aa6a590df9d1e149933b706e2b58f6a47a0361e6dc7081f89ef5495fa6f8a0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcd1bb225000004030046304402205065edb0753ac5afdb14eed553ddfe7e4697283d1fe10f7bee8c647db9f0fc6f02205992cafe1e1cd1ff8790bbfa121b1ca33a13f1e7a77c35bbd978dff66c463510
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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