duyin.com

Issued by R3

About this certificate

This digital certificate with serial number 03:78:96:6f:9b:02:f8:71:5d:14:c3:ae:2f:09:65:da:a9:a5 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=duyin.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:96:6f:9b:02:f8:71:5d:14:c3:ae:2f:09:65:da:a9:a5
Serial Number (int): 302370705514121224523932861808248241170853
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6d:65:23:08:40:5f:1d:19:e1:56:28:1c:7c:f1:14:57:bf:11:57:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f5:c7:58:66:e9:08:4b:31:08:d4:db:9b:20:83:99:92:93:79:08:b3
Fingerprint (sha256): d5:d6:38:44:d7:f2:e1:5b:00:7c:6c:72:59:01:d4:70:b9:3b:eb:3b:b1:61:ef:a1:a2:69:18:9d:7f:22:fe:2d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate duyin.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for duyin.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alclassifieds.com
*.ashleyhomefurniture.com
*.bamboogreens.com
*.bankingonline.in
*.bankofacmerica.com
*.bbsyouba.com
*.begames.com
*.brief.computer
*.coopers.rentals
*.crystals.repair
*.dietasespeciales.com
*.drivetrac.com
*.duyin.com
*.fedes.com
*.gaziantepcity.info
*.gomastercard.com
*.googlechrome.se
*.googlechromestore.com
*.googlecrhome.com
*.hotmailail.com
*.jahad.com
*.jiujitsu.net.au
*.jizzbunker.pro
*.leapfroggroup.com
*.lumitouch.com
*.merilatt.com
*.minecraftdownload.com
*.moscow.bike
*.netfacebook.com
*.nevada.gifts
*.o2cworld.com
*.operations.industries
*.packlink.au
*.pair9.com
*.pastran.com
*.payplal.com
*.recalls.chat
*.seporah.com
*.shopnordstroms.com
*.stevens.events
*.syawal.com
*.testicularcare.com
*.textilelearner.com
*.trensmicro.com
*.vistaporint.com
*.volcocars.com
*.weathchannel.com
*.ymasil.com
*.youtubyoutube.com
alclassifieds.com
ashleyhomefurniture.com
bamboogreens.com
bankingonline.in
bankofacmerica.com
bbsyouba.com
begames.com
brief.computer
coopers.rentals
crystals.repair
dietasespeciales.com
drivetrac.com
duyin.com
fedes.com
gaziantepcity.info
gomastercard.com
googlechrome.se
googlechromestore.com
googlecrhome.com
hotmailail.com
jahad.com
jiujitsu.net.au
jizzbunker.pro
leapfroggroup.com
lumitouch.com
merilatt.com
minecraftdownload.com
moscow.bike
netfacebook.com
nevada.gifts
o2cworld.com
operations.industries
packlink.au
pair9.com
pastran.com
payplal.com
recalls.chat
seporah.com
shopnordstroms.com
stevens.events
syawal.com
testicularcare.com
textilelearner.com
trensmicro.com
vistaporint.com
volcocars.com
weathchannel.com
ymasil.com
youtubyoutube.com

Other certificates including the domain name duyin.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for duyin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302370705514121224523932861808248241170853
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 20:23:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 20:23:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'duyin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793937229406745812754784709682566703183828487051910960606099915510290013136613179796279243083788335651381293027011133146434346584502924310167079733549930413177457004780286978125206442118892481705575492324942242790101857742599069096925023002356916998426710295542949586082204817543144827558639528494321456781182508343207042964210783406458678319102538697997735041729872819928402521345629139952826914608944928263966053996831973406480965121309051190436540944580917994047656853645492280558843279446199083268649610542135338699789339193152185893504898222103920009447676829601706626737346861705277706719381209531384270169230645480058675540046611244962335105188185015942839526227085449268830632497431116137361029198875986346765573395864510874925681872117147135012940347854972281444417626103996895534557889663058653312438383276329064596349178847520332957751442054268700988666832733639545502948877923028420885136687464725340562676461715091094157088237446700380308251138728016121942224583638637613020101952398029331259662215519402122510250922327927836190187477952828384733115870988094541564605441047621668395172850567670951772609583041001745418857256091135566021133142895097700787425507378926258974954600243248120425254738027853718054586164895791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d652308405f1d19e156281c7cf11457bf115787
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1714 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alclassifieds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashleyhomefurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bamboogreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankingonline.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankofacmerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbsyouba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.begames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brief.computer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coopers.rentals'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crystals.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dietasespeciales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drivetrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duyin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fedes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaziantepcity.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gomastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googlechrome.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googlechromestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googlecrhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotmailail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jahad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiujitsu.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jizzbunker.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leapfroggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumitouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merilatt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minecraftdownload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moscow.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netfacebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nevada.gifts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.o2cworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.operations.industries'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.packlink.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pair9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pastran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payplal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recalls.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seporah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopnordstroms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevens.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syawal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testicularcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.textilelearner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trensmicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vistaporint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volcocars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weathchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youtubyoutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alclassifieds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyhomefurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamboogreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingonline.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofacmerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbsyouba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'begames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brief.computer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coopers.rentals'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystals.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dietasespeciales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivetrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duyin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaziantepcity.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gomastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlechrome.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlechromestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlecrhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotmailail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jahad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiujitsu.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jizzbunker.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfroggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumitouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merilatt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecraftdownload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moscow.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netfacebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevada.gifts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o2cworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operations.industries'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packlink.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pair9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payplal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recalls.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seporah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopnordstroms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevens.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syawal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testicularcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textilelearner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trensmicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistaporint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volcocars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weathchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youtubyoutube.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1cf6ec9e0000040300483046022100d9ec6a47f63e8abb35b2f3c506856cb754ad4dbe252f3c3f2a11ee89f96e3ce0022100a5e14dcbcb6957c3b2302e5fc97d5b22670aab779595124e8d2d19daf411e87a0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c1cf6eca70000040300463044022062a4c49f5e07e4043a8e2ae65f046176135b518281d48629cc77031b483c062a02204e421bfce557ac7852379c3b900ed4bb77c43f1d24b1b55d86dca62572650114
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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