safepointis.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f7:ab:8f:25:43:fb:63:81:29:dd:4f:bc:8b:47:0b:34:1a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=safepointis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f7:ab:8f:25:43:fb:63:81:29:dd:4f:bc:8b:47:0b:34:1a
Serial Number (int): 432726929598078021411212912648732617159706
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: da:ec:2f:13:64:33:ac:37:81:27:0b:12:70:2d:87:f9:86:c4:d3:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ca:fd:b2:7e:2f:82:fa:3d:17:ba:f7:4a:67:35:8b:1e:48:18:d8:26
Fingerprint (sha256): d0:9a:13:5b:87:e3:e1:a0:2e:2b:70:a4:f4:9e:f2:8c:91:aa:70:fd:64:a8:41:9d:4e:2e:61:4f:7f:57:4e:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate safepointis.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for safepointis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.23dhk63.xyz
*.39800.shop
*.adamjpestridge.com
*.ahbindia.com
*.anpkickz.co
*.bhatiaproperty.org
*.cbdvape4life.com
*.chndrk.pl
*.cll14.xyz
*.danielsjewelry.com
*.deaconplacewake.com
*.deluxenailportsmouth.com
*.donatellafabio-shop.com
*.drnataschasantos.com
*.drumexpert.net
*.dztk.me
*.extreme-ddl.com
*.fgossena.com
*.find-on.me
*.forexkereskedelem.info
*.hgldh3.live
*.hinata-crossdressing.online
*.khanhxnguyen.com
*.leiting993.com
*.liferadio.org
*.mainbase.site
*.mantcity.com
*.mysecondsminds.com
*.opendoorinverclyde.org
*.optical-seti.org
*.ppsford.co
*.queenslandtourism.com.au
*.reveremag.com
*.rihla.pro
*.royalexpressdeliveryco.com
*.rufusstarlight.com
*.safepointis.com
*.searchcode.co
*.seducaosecreta.org
*.shingogames.com
*.somethingforeveryone.net
*.startupdepression.com
*.sterlingmccalltoyotafortbend.co
*.storageinabox.net.au
*.ta39.xyz
*.tbart.net
*.tbtnee.co
*.timnegocia.co
*.voicesfromthevillage.com
*.watchfreetv.online
23dhk63.xyz
39800.shop
adamjpestridge.com
ahbindia.com
anpkickz.co
bhatiaproperty.org
cbdvape4life.com
chndrk.pl
cll14.xyz
danielsjewelry.com
deaconplacewake.com
deluxenailportsmouth.com
donatellafabio-shop.com
drnataschasantos.com
drumexpert.net
dztk.me
extreme-ddl.com
fgossena.com
find-on.me
forexkereskedelem.info
hgldh3.live
hinata-crossdressing.online
khanhxnguyen.com
leiting993.com
liferadio.org
mainbase.site
mantcity.com
mysecondsminds.com
opendoorinverclyde.org
optical-seti.org
ppsford.co
queenslandtourism.com.au
reveremag.com
rihla.pro
royalexpressdeliveryco.com
rufusstarlight.com
safepointis.com
searchcode.co
seducaosecreta.org
shingogames.com
somethingforeveryone.net
startupdepression.com
sterlingmccalltoyotafortbend.co
storageinabox.net.au
ta39.xyz
tbart.net
tbtnee.co
timnegocia.co
voicesfromthevillage.com
watchfreetv.online

Other certificates including the domain name safepointis.com

(limited to 100 certificates)
safepointis.com
safepointis.com
safepointis.com
monkies-shoes.com
monkies-shoes.com
safepointis.com
safepointis.com

Certificate

The complete raw certificate details for safepointis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432726929598078021411212912648732617159706
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 18:02:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 18:02:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'safepointis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671929569258633764517442003821363401540367209261243824901441257921521641971194940963048231864232136050071695879825750762541710546147654809383980182503006395150131417070416716335606469278344894751675362519989646942975182829505426886750886613223558798198787514004276319273376418251849954323866270394888644789825839168281776978189137208571302422407265457891866770400248149373932795662351113782245583311236970062140971603193327433370752580762445574304473078376647469442930689583099879100872334024115901016997176339486740070871388364077321853104055245746850523088889427699576796128889976223480498546225710174840100920264455747884882568532882717264476987596323887328878864119197105242111742952171600432658924977438288043616721259654588917871464946505251504897950824428201856566722404272571136568691924062737223936917102995028488125126316448517401584195256662226417875466319482779829015013876729708493089846619269455374195765524464519324797747149160100016781096279564301946409959353480873590260382626710393159373310482954662827270839903973265131174918736306207331653665805007725981685622991848245839420895672510271144466982080677191445678348135767769087180569078942856272834507346626812845535513591918878363563893223980278561514294966708431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							daec2f136433ac3781270b12702d87f986c4d35c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1900 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.23dhk63.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.39800.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamjpestridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahbindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anpkickz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhatiaproperty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbdvape4life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chndrk.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cll14.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danielsjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deaconplacewake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deluxenailportsmouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donatellafabio-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drnataschasantos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drumexpert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dztk.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extreme-ddl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fgossena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.find-on.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forexkereskedelem.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hgldh3.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hinata-crossdressing.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khanhxnguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leiting993.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liferadio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainbase.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mantcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysecondsminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opendoorinverclyde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optical-seti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppsford.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.queenslandtourism.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reveremag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rihla.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalexpressdeliveryco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rufusstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safepointis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchcode.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seducaosecreta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shingogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somethingforeveryone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startupdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sterlingmccalltoyotafortbend.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storageinabox.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ta39.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbart.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbtnee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timnegocia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voicesfromthevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchfreetv.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '23dhk63.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '39800.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamjpestridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahbindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anpkickz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhatiaproperty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbdvape4life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chndrk.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cll14.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danielsjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deaconplacewake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deluxenailportsmouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donatellafabio-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drnataschasantos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drumexpert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dztk.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extreme-ddl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgossena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'find-on.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexkereskedelem.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgldh3.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hinata-crossdressing.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khanhxnguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leiting993.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liferadio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainbase.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mantcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysecondsminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendoorinverclyde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optical-seti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppsford.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenslandtourism.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reveremag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rihla.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalexpressdeliveryco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rufusstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safepointis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchcode.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seducaosecreta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shingogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somethingforeveryone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startupdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingmccalltoyotafortbend.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storageinabox.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ta39.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbart.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbtnee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timnegocia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicesfromthevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchfreetv.online'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018df63f40030000040300483046022100c493020e8a87f50ca89d7b7eeff5e77a1544baf87633a1d1b98de2ab011b94f0022100fc0f318dc6ff2f0bb26cfd0c36edf9315dae3fb2daff2c69c6fa6f50baecf782007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018df63f400c000004030047304502206e659364bfd6744464a7e33a1a610a0d7bdc67c7314409466b62c9f70918a6e9022100d3477aaa9f0f7a51e1935c80019a419eb08905cff247a97c7932f9b17a19f0b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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