barossavalleywine.com.au

Issued by R3

About this certificate

This digital certificate with serial number 04:64:60:47:6b:b7:82:af:68:b9:14:e5:56:82:82:a7:50:59 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=barossavalleywine.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:64:60:47:6b:b7:82:af:68:b9:14:e5:56:82:82:a7:50:59
Serial Number (int): 382605357144564167268068034034196315328601
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2d:ec:5a:6c:02:a1:e4:62:56:f0:31:9b:5c:b9:da:96:9d:ed:c6:09
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ad:2d:4b:dd:a1:7f:ab:4e:d7:71:fe:99:4f:33:68:14:28:0d:71:aa
Fingerprint (sha256): cd:59:ce:5f:a3:31:70:a3:71:2d:a3:2f:f5:8a:90:0d:45:80:96:8a:a4:73:df:31:45:c0:7b:0b:5a:d0:5f:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate barossavalleywine.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barossavalleywine.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acupuncture2heal.com
*.alphabetlotto.com.au
*.arafrica.net
*.atdeveloper.org
*.barberlasvegas.com
*.barossavalleywine.com.au
*.besthoodia.com
*.cartonet.com
*.centicusbusinesssolutions.com
*.chinathai-schnellrestaurant.de
*.costcoauto.co
*.cqsw.com
*.crantock-cottages.biz
*.easyearning.net
*.edendelapresquile.com
*.egebet48.com
*.encuentrossecretos.es
*.extremedirectness.com
*.faciablaster.com
*.fragrane.com
*.hnmtjy.com
*.homeloanbrain.com.au
*.jmisadolls.info
*.jrtux.com
*.kingnetwork.eu
*.kittyfaps.co
*.kmc6es.com
*.lartransports.com
*.microwavedryermachine.com
*.mrminer.co
*.niigata2km.com
*.onyxrat.com
*.pacunderwear.com
*.plralsight.com
*.purerance.com
*.qft.in
*.salonmundomagico.com
*.seren8.com
*.spice-wolf.com
*.streamaxonline.com
*.sttlink.me
*.tamarindreefhotel.com
*.templeofgodministries.org
*.terrific-dispatchtolearntoday.info
*.unpopularopinionsdots.com
*.upcaller.com
*.vivademolitionandremodeling.com
*.webuyancarusa.com
*.winstarpower.com
*.xiheng.com
acupuncture2heal.com
alphabetlotto.com.au
arafrica.net
atdeveloper.org
barberlasvegas.com
barossavalleywine.com.au
besthoodia.com
cartonet.com
centicusbusinesssolutions.com
chinathai-schnellrestaurant.de
costcoauto.co
cqsw.com
crantock-cottages.biz
easyearning.net
edendelapresquile.com
egebet48.com
encuentrossecretos.es
extremedirectness.com
faciablaster.com
fragrane.com
hnmtjy.com
homeloanbrain.com.au
jmisadolls.info
jrtux.com
kingnetwork.eu
kittyfaps.co
kmc6es.com
lartransports.com
microwavedryermachine.com
mrminer.co
niigata2km.com
onyxrat.com
pacunderwear.com
plralsight.com
purerance.com
qft.in
salonmundomagico.com
seren8.com
spice-wolf.com
streamaxonline.com
sttlink.me
tamarindreefhotel.com
templeofgodministries.org
terrific-dispatchtolearntoday.info
unpopularopinionsdots.com
upcaller.com
vivademolitionandremodeling.com
webuyancarusa.com
winstarpower.com
xiheng.com

Other certificates including the domain name barossavalleywine.com.au

(limited to 100 certificates)
cloudcloner.com
xg666.asia
barossavalleywine.com.au
barossavalleywine.com.au
xg666.asia
barossavalleywine.com.au
fhf.com.au

Certificate

The complete raw certificate details for barossavalleywine.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382605357144564167268068034034196315328601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 16:55:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 16:55:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barossavalleywine.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822055191103027984573026305558429497099715357106262990107795243276052192284855258014180339782331796558899754722160403966292185691325811253778963742342877862605145236789187793553251782288597746829472628220262738069151644843687492810422912071464563229793573440070492141673933954222754724271583808017798707136958287450636981640690484185679041927483109068721919497412781672136727372548839084433407508627344312909140917242801357383643528878597438039337103691113803302440744910750711411538095275884834844912955492608078169340448868579286617476294764120208321182045166176284464882937268545812951688004196253276933580614300247977624635228270279145092561664125913090682575985580694599764246265574249706748242486879164309019393473048375779587114878482285049045598941065775012495648233394440574855072405020751011112307013693556692653683288424919295110046005483139217428743576886118074497435006245269744792306011389400582666197513754062454145714037031123158465022888224038452415774659432071200175215079421758779221668157071531444892520492040315442522644805257416108618663612663550554224432150186542115976073793668522980865834612150668274591112763290670106644372006071992354893659629992528882695694234806413741899036078952295526147281216298806991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2dec5a6c02a1e46256f0319b5cb9da969dedc609
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1970 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acupuncture2heal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alphabetlotto.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arafrica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atdeveloper.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barberlasvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barossavalleywine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.besthoodia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centicusbusinesssolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinathai-schnellrestaurant.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.costcoauto.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cqsw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crantock-cottages.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyearning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edendelapresquile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egebet48.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encuentrossecretos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extremedirectness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faciablaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fragrane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hnmtjy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeloanbrain.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmisadolls.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jrtux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingnetwork.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kittyfaps.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kmc6es.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lartransports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microwavedryermachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrminer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niigata2km.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onyxrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacunderwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plralsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purerance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qft.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salonmundomagico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seren8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spice-wolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamaxonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sttlink.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamarindreefhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.templeofgodministries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terrific-dispatchtolearntoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unpopularopinionsdots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upcaller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vivademolitionandremodeling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webuyancarusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winstarpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiheng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acupuncture2heal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphabetlotto.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arafrica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atdeveloper.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barberlasvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barossavalleywine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besthoodia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centicusbusinesssolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinathai-schnellrestaurant.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcoauto.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqsw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crantock-cottages.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyearning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edendelapresquile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egebet48.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encuentrossecretos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extremedirectness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faciablaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fragrane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnmtjy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeloanbrain.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmisadolls.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrtux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingnetwork.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kittyfaps.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmc6es.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lartransports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microwavedryermachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrminer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niigata2km.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onyxrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacunderwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plralsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purerance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qft.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salonmundomagico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seren8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spice-wolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamaxonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttlink.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamarindreefhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templeofgodministries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrific-dispatchtolearntoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unpopularopinionsdots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upcaller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivademolitionandremodeling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webuyancarusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winstarpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiheng.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcef8f891000004030046304402203006f3a201a57262a26686441cd48e53b4bf88aab7b898a423dacb3ab30c2e8e0220067a8e08a8a6895a6dc976e47b3893aa3a543c4de3cf1b10ce3b60adf869798f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bcef8f89a00000403004730450220437a7328ff758eca8f8dae253b9e3e7384c8b2aeb5a2441dd55cb68ebf6884430221009a1581036127ec3a0e4f5e835f0b52de74fee355bf0852d36878f35735d53693
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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