magicjeck.com

Issued by R3

About this certificate

This digital certificate with serial number 04:49:2a:0d:4c:dd:b0:bd:5c:a7:5f:7b:76:e5:e4:e7:0e:82 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=magicjeck.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:49:2a:0d:4c:dd:b0:bd:5c:a7:5f:7b:76:e5:e4:e7:0e:82
Serial Number (int): 373345653146978873918176112778710027275906
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fd:85:c6:65:14:10:85:df:3e:b2:d6:22:4e:9b:43:a5:24:b1:3b:17
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6c:f3:45:ce:8a:77:a0:05:ca:3d:df:e2:ae:28:aa:9f:e7:7c:5a:c0
Fingerprint (sha256): cd:c8:bd:63:6c:86:48:55:91:df:46:73:af:ba:af:02:a1:94:d8:d2:1d:30:55:38:f8:55:aa:fd:ad:f4:eb:8b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate magicjeck.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magicjeck.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.112dy.com
*.abandoned-houses-31414.com
*.abhilashshrivastava.com
*.ahliqq.cc
*.butwhereareyoureallyfrompodcast.com
*.buyfakett.com
*.cancerouscows.com
*.centrostone.com
*.chiefcomponents.com
*.cliphunter.info
*.concretekingsporttn.com
*.cwsfiradev.com
*.dentalimplantswebusa.com
*.hm446.com
*.huayuanfa.com
*.istocode.com
*.lahacorner.com
*.lesarrougeys.com
*.loud-pc.com
*.lucisguru.com
*.magazinetours.com
*.magicjeck.com
*.missedphonecall.com
*.mspearofdiamonds.com
*.naturalreeders.com
*.onlinepokieonline.com
*.onlinepokieonlines.com
*.onlinepokiesnet.com
*.perfecttobuy.com
*.pharm-inn.com
*.plastic-surgery-24149.com
*.plastic-surgery-96602.com
*.pokiesnet31.com
*.rehabhelperus.com
*.reveebnation.com
*.roofinginperth.com
*.sell123.org
*.team111111.com
*.thepokienet33.com
*.tomatocb.com
*.tscom.net
*.tthepokie.com
*.tthepokies.com
*.tvgook87.com
*.used-cars-71586.com
*.vuidu.com
*.wanboamy.com
*.wannoncr.com
*.zonbi.org
*.zuzusweet.com
112dy.com
abandoned-houses-31414.com
abhilashshrivastava.com
ahliqq.cc
butwhereareyoureallyfrompodcast.com
buyfakett.com
cancerouscows.com
centrostone.com
chiefcomponents.com
cliphunter.info
concretekingsporttn.com
cwsfiradev.com
dentalimplantswebusa.com
hm446.com
huayuanfa.com
istocode.com
lahacorner.com
lesarrougeys.com
loud-pc.com
lucisguru.com
magazinetours.com
magicjeck.com
missedphonecall.com
mspearofdiamonds.com
naturalreeders.com
onlinepokieonline.com
onlinepokieonlines.com
onlinepokiesnet.com
perfecttobuy.com
pharm-inn.com
plastic-surgery-24149.com
plastic-surgery-96602.com
pokiesnet31.com
rehabhelperus.com
reveebnation.com
roofinginperth.com
sell123.org
team111111.com
thepokienet33.com
tomatocb.com
tscom.net
tthepokie.com
tthepokies.com
tvgook87.com
used-cars-71586.com
vuidu.com
wanboamy.com
wannoncr.com
zonbi.org
zuzusweet.com

Other certificates including the domain name magicjeck.com

(limited to 100 certificates)
niazemarkazi.com
magicjeck.com
magicjeck.com
golffantics.com
javpix.net
magicjeck.com
www.fisgon.com
magicjeck.com
ungan.com

Certificate

The complete raw certificate details for magicjeck.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtTNBCTx/buqZ0e6MGogb
U6r/dHlApGlMuimCyZJKY7HZJNlQ1m13W3/s3+3bEu+3ZVIjyozuqH39EYwhDLTO
1XxkzAVPrxvih28xe0hlU34o4Pqzp/a3FZXSULNHy05T2B7Zj2mscUaSPUdWjU/E
ZSUsrjiZED+iQHpb1SMEWZCTar5KG0uCEqz9fgPb7d/UM2K5ImnuUXSLHb+FGb88
57FCU6IK8Hd6n+GqhETxA616QIGhlQrAoAAh+EYxItmnvFnMCl/Pmlv4gJWlCYH8
vhmRzZUbhCbZ0Nw/mRW80SHiQypdGbahYo7qZFS9PhUr5poKattoY/vDhQrnubkx
AHoxqS5c1/rsmWJ7JOvcqgoAyX68JlSkg0W8Fjpln9E2c9slp2sstpgtKtSI8DMt
qUn5ilKu3Pxdzj7Y8zcXF9754TDO8Kfs1w6gV/IUgfv2Ohn2cjgzbsvipdbXL1ZW
EQJIWJJx+GZABSB1uykS95Lx40JFkJ2oSoTvloCskroAv8+b0wGuaHUqw81O2vJ6
wBoylHl4eLQbdukUHfd9waEO3JmvsPvkzcYUZlgfjibXgW1I8kS9e2fcDDw2psiY
IXsGOqDshaoKXyrDZ3haLqQjNk8HCe0SzEasyA9CrT/2NGZxv4Rn90tmwiQ4BPJf
pToQrBLsFfA7fFVa+dDZmksCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373345653146978873918176112778710027275906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 07:14:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 07:14:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magicjeck.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739232366427113746699316955981961600086678519552134414864543054246723790900045105965469985480936594202091805712975982626515579696472889407407644016984531306843019046039978980659009428014097418173743259571211687581875310746999812369740808374358391481918107558730662676264404741189912584860424051981420426369298728558876487242704807917436934375762167942810723243599912792434707768979322350509443698976697010875447288378494809782004481591897235593573310016530968422988734447357142303916563705652183224287857096646064648986648945519309972707594558061437405721169438183408554648682819767037578115296123786398520247177834483274333494804449352282473480624750005085046350637354013290678885296602989361987906532081435934409870421342873593574826129325197779302382175081859578989782700919342630831706444746230279475627276994051845674293594144063663247214240312383791094915075586468910094998206369631791414464528214440246309634596936864384510855975452287674788117462340514427352302774270139519665324875886240936281401909345253169071400852197402353425669577276897569743210543924633600984488291036671366193183892216248154898607676681836339089147652498214495048226137933172135112069462891080967287866993447741616835071975184548680656002565505915467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd85c665141085df3eb2d6224e9b43a524b13b17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1904 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.112dy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abandoned-houses-31414.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abhilashshrivastava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahliqq.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.butwhereareyoureallyfrompodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buyfakett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cancerouscows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centrostone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiefcomponents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cliphunter.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concretekingsporttn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwsfiradev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentalimplantswebusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hm446.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huayuanfa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.istocode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lahacorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesarrougeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loud-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucisguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magazinetours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magicjeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.missedphonecall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mspearofdiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalreeders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinepokieonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinepokieonlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinepokiesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfecttobuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharm-inn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plastic-surgery-24149.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plastic-surgery-96602.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokiesnet31.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rehabhelperus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reveebnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roofinginperth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sell123.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.team111111.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepokienet33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tomatocb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tscom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tthepokie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tthepokies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvgook87.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.used-cars-71586.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vuidu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wanboamy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wannoncr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zonbi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuzusweet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '112dy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abandoned-houses-31414.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abhilashshrivastava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahliqq.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butwhereareyoureallyfrompodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyfakett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancerouscows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrostone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiefcomponents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliphunter.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concretekingsporttn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwsfiradev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalimplantswebusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm446.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huayuanfa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istocode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahacorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesarrougeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loud-pc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucisguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazinetours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicjeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missedphonecall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mspearofdiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalreeders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinepokieonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinepokieonlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinepokiesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfecttobuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharm-inn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plastic-surgery-24149.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plastic-surgery-96602.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokiesnet31.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rehabhelperus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reveebnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofinginperth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sell123.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team111111.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepokienet33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomatocb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tscom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tthepokie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tthepokies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvgook87.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'used-cars-71586.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vuidu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanboamy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wannoncr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonbi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuzusweet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018adada7e5100000403004730450220015f8b9750b56f921149fe44cb8f6cd477e44659f4fc68948feaa9ffbd7e468c02210098b3be564522aa0ef34401ef4a0b24c3c045f5cc8b91994c1f4773c221f555b4007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018adada7e48000004030046304402205394f9d4c0e2b3fdccc58c88d98b75f46eb4988ac9a8ef46d6e6bdc239e8c10c02207474fda9c1e212ef64a23a1cfe37d1a61211474b797153c2a3117c857d0634bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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