dirknowitzki.com

Issued by R3

About this certificate

This digital certificate with serial number 04:57:30:85:94:57:30:ca:1e:03:d6:88:43:76:7a:5f:2c:04 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dirknowitzki.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:57:30:85:94:57:30:ca:1e:03:d6:88:43:76:7a:5f:2c:04
Serial Number (int): 378118206177147065106200166383030892440580
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 97:99:60:29:71:04:5a:57:d8:3a:5c:cc:69:6e:19:c9:aa:62:c6:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3d:57:a0:92:97:6f:4b:fa:38:4d:93:82:5e:05:b2:f0:25:fb:c4:e3
Fingerprint (sha256): cb:d1:66:c3:33:5f:7b:5a:b9:b1:d3:d4:64:b4:e9:db:b7:e1:5a:3c:37:cc:02:50:7a:74:00:20:b1:8a:77:3c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dirknowitzki.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dirknowitzki.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.albahhar.com
*.ampcscgiftcards.co
*.amumacancersupportgroup.org
*.antiraggkng.org
*.arethosewholeavecatholicchurchandbecome.pro
*.bottox.com
*.bridgeargentina.com
*.bud99.net
*.businessletterformat.info
*.cantilena.com
*.celentano.com
*.controldecuentas.com
*.darake.com
*.dirknowitzki.com
*.downloadgrqm.org
*.ercasmusintern.org
*.europeanvacationspots.com
*.eutimio.com
*.firsthandexperience.com
*.gokpinar.com
*.hebbar.com
*.hoebeke.com
*.hotwebcam.click
*.indiansexstories4.net
*.javpian.com
*.jenetzenfranklin.org
*.kamenov.com
*.keychon.com
*.lifehangama.com
*.livesports247.net
*.maruziyetetkibdeerinedemek.com
*.mazyar.com
*.orunescape.wiki
*.poffcakes.biz
*.professionalplaza.com
*.proofcoe.click
*.rollapp.co
*.satansservice.org
*.slotv-online.com
*.snuffelmarkt.com
*.supplelyoftanks.uk
*.teckirti.org
*.teckti.org
*.tecnitree.com
*.thelifediet.com
*.tucasasnc.com
*.twinfallcounty.org
*.webworldtravel.com
*.youngafricanleadership.org
albahhar.com
ampcscgiftcards.co
amumacancersupportgroup.org
antiraggkng.org
arethosewholeavecatholicchurchandbecome.pro
bottox.com
bridgeargentina.com
bud99.net
businessletterformat.info
cantilena.com
celentano.com
controldecuentas.com
darake.com
dirknowitzki.com
downloadgrqm.org
ercasmusintern.org
europeanvacationspots.com
eutimio.com
firsthandexperience.com
gokpinar.com
hebbar.com
hoebeke.com
hotwebcam.click
indiansexstories4.net
javpian.com
jenetzenfranklin.org
kamenov.com
keychon.com
lifehangama.com
livesports247.net
maruziyetetkibdeerinedemek.com
mazyar.com
orunescape.wiki
poffcakes.biz
professionalplaza.com
proofcoe.click
rollapp.co
satansservice.org
slotv-online.com
snuffelmarkt.com
supplelyoftanks.uk
teckirti.org
teckti.org
tecnitree.com
thelifediet.com
tucasasnc.com
twinfallcounty.org
webworldtravel.com
youngafricanleadership.org

Other certificates including the domain name dirknowitzki.com

(limited to 100 certificates)
selfhomerepair.com
dirknowitzki.com
sportstablet.com
dirknowitzki.com
www.porkmaster.com
dirknowitzki.com
dirknowitzki.com
affac.com
job-job.online
affac.com
brisman.com
dirknowitzki.com
dirknowitzki.com

Certificate

The complete raw certificate details for dirknowitzki.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378118206177147065106200166383030892440580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 21:08:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 21:08:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dirknowitzki.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 644123631121896308694555967062592758859785745932185591257943475790411043757091834086909997766157606251883933452891519841967964693678320136578714979013031455509476091282778383850374994202213389160369026532692057012312986152819762345672706691618850045334624134528014567212789474358040570784296722890147742385968337786021191824286137870812324797363563214100312282844063367187660576020900001791043347310548532084633807287133657081103843627142662165357300986206187781698719763307212379423475153089747328735651723632794670937319114160916112609449039979052991762821537137056060715112290034855304761952856125548497302927369344302687314492089306809273935298305084045884688660095526245149343364277699161596207669540219797905006692083493246532437344146428543889248528631780189734669975314900247454220418399871050142857602955815224625806992847274073261634938390554329232047520481452998770608969903341173354130592661534882451169157888007170774183786720293010103032357456142659648263353958814284073633992273364475932956204118457964921995051816198398915093738331630467728918714114931877050856265945165612497596360599276463889060450963663526456158244031886022579467386471165950592892259235090491624120941231547046671779722453863360306510780655968237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9799602971045a57d83a5ccc696e19c9aa62c63c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1902 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albahhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ampcscgiftcards.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amumacancersupportgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antiraggkng.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arethosewholeavecatholicchurchandbecome.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bottox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bridgeargentina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bud99.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessletterformat.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cantilena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celentano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.controldecuentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dirknowitzki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downloadgrqm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ercasmusintern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.europeanvacationspots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eutimio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firsthandexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gokpinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hebbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoebeke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotwebcam.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indiansexstories4.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javpian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jenetzenfranklin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kamenov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keychon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifehangama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livesports247.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maruziyetetkibdeerinedemek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mazyar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orunescape.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poffcakes.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.professionalplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proofcoe.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satansservice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slotv-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snuffelmarkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplelyoftanks.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teckirti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teckti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnitree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelifediet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tucasasnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twinfallcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webworldtravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youngafricanleadership.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albahhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampcscgiftcards.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amumacancersupportgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiraggkng.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arethosewholeavecatholicchurchandbecome.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bottox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgeargentina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bud99.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessletterformat.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantilena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celentano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controldecuentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirknowitzki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadgrqm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ercasmusintern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europeanvacationspots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eutimio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsthandexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokpinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hebbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoebeke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotwebcam.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiansexstories4.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javpian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenetzenfranklin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamenov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keychon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifehangama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livesports247.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maruziyetetkibdeerinedemek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazyar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orunescape.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poffcakes.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proofcoe.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satansservice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotv-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snuffelmarkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplelyoftanks.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teckirti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teckti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnitree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelifediet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucasasnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinfallcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webworldtravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngafricanleadership.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bda2d9b7a0000040300483046022100f809bc2ca7c265836e44e814a0be5cb6c97e25a80afa07ae612d159b5fb87336022100d39730bd6c1711f6f4182b8b7d831747294b7efdd4a22e69386d9889e096cd540075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bda2d9b7c000004030046304402202670d4462fdc82c6bfbf39b19b80578dd5cb6a18c80ca9cb87072dc0f20f97ba0220322e74022c993e665a67204c222de9b8c5e04916fdfab9426b66cef6beb1b95b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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