cejam.org

Issued by R3

About this certificate

This digital certificate with serial number 04:92:5c:1d:e7:d7:d1:c6:bb:c5:54:e0:2a:f3:ed:cf:2f:2a was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cejam.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:92:5c:1d:e7:d7:d1:c6:bb:c5:54:e0:2a:f3:ed:cf:2f:2a
Serial Number (int): 398252813552054708027646970474140774903594
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dd:a1:64:96:db:70:2a:9a:6c:59:66:56:e3:89:43:b5:88:6e:65:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:f6:5f:a7:0c:7d:48:2c:6a:1a:18:cd:3a:01:ee:2a:dc:44:4c:6e
Fingerprint (sha256): d6:43:e4:c3:9c:d7:67:ac:dd:dd:aa:6a:ad:53:8c:d7:01:49:1e:b3:64:5e:8c:9a:53:f6:40:24:51:2a:d8:3c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cejam.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cejam.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3dproductspro.com
*.6oup.com
*.abitaxi.com
*.adfeedbackhub.com
*.aktivkohlepulver.de
*.anytdesk.com
*.aprendionline.com
*.avivohomes.com
*.aykutblog.com
*.beautyexpousa.com
*.britsishgas.co.uk
*.bullstreetauctions.com
*.cadeauxfrancais.com
*.calperm.com
*.cejam.org
*.chilisextube.com
*.chocola-chocola.com
*.cnmis.org
*.cosohuuphat.com
*.easorts.com
*.figuire.com
*.gay-fisting.com
*.getridofjugglers.com
*.grrmf.com
*.guernseyscraprecycling.com
*.linseydawnofficial.com
*.lreevent.com
*.marzettis.com
*.newchannel9.com
*.nuclearcarepartnersquickbase.com
*.obstetrician.online
*.offencive-security.com
*.onaytv7.com
*.parkinsonvoice.org
*.petesperformancewiring.com
*.realruck.com
*.saudi-shop.online
*.sgcookieco.com
*.skkvwnv.com
*.todowuarras.com
*.truyen3d.net
*.twinkspired.com
*.unitedhealthcareprovider.com
*.uwcsl.com
*.vicbagger.com
*.wangdatradingmadrid.com
*.webmail10.com
*.weddingphotographyphotos.net
*.yaghtworld.com
3dproductspro.com
6oup.com
abitaxi.com
adfeedbackhub.com
aktivkohlepulver.de
anytdesk.com
aprendionline.com
avivohomes.com
aykutblog.com
beautyexpousa.com
britsishgas.co.uk
bullstreetauctions.com
cadeauxfrancais.com
calperm.com
cejam.org
chilisextube.com
chocola-chocola.com
cnmis.org
cosohuuphat.com
easorts.com
figuire.com
gay-fisting.com
getridofjugglers.com
grrmf.com
guernseyscraprecycling.com
linseydawnofficial.com
lreevent.com
marzettis.com
newchannel9.com
nuclearcarepartnersquickbase.com
obstetrician.online
offencive-security.com
onaytv7.com
parkinsonvoice.org
petesperformancewiring.com
realruck.com
saudi-shop.online
sgcookieco.com
skkvwnv.com
todowuarras.com
truyen3d.net
twinkspired.com
unitedhealthcareprovider.com
uwcsl.com
vicbagger.com
wangdatradingmadrid.com
webmail10.com
weddingphotographyphotos.net
yaghtworld.com

Other certificates including the domain name cejam.org

(limited to 100 certificates)
thepiratefilme.com
cejam.org
cejam.org
boazbigdata.com
boazbigdata.com
cejam.org
cejam.org

Certificate

The complete raw certificate details for cejam.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzlHkDPKXM7eUUvFEzr9m
/tyoxXt6pUWfOO5wxp//hqANpMjX9ntGZxs8eKHEI2I7yvbjiSyfWHuDRQqtkoZW
ETD55b6F7LE3BJfCUWnlZKIEt8v1tiJByL0uOg6wUOFFiEJKS7mHKtbt2AZBmeep
QYuxywqb3kXH0Cvk7JH+z9w03ctr9aPnLm0qQmdxsdpBduRZhoDk+w4C08Q/h0lH
+ehhpd+S9/ECN812m2foUk45Zmp3oGxgrKhG+8FfL7ZSHoeBpH6FOMGRbxv7aWW7
PiwEFpdpWPr/wWNqP2i8fIf4/tK2tWsL1syLi1aMO8OVuv1i09EPLygdL/OLGT3P
CKWMAfM3klEIinQ0yYC2hz1brvywdJNuQEXp7vQ9GVVs5ANw+OJ4D2V3R/fmIu90
1Gkx9TNUGLyFzEjdRBKyThrqHzuZgUp4OIgu9R6idOmOASrHVDw7SHXbUD7xIBCU
rSx+dnKcWYLhxY2t9EqkQR/d/l6XNtgCIKodotAAG8ReIe3lnOdtTRrLv0zyR0Gs
OywplJlU325mwu8X6Z7Hta0F39uNTmNF1Nsx4XU8ftGW7NrupPo/Y0b45kVRL1l8
CWTmldX3HRYstuMttlliY5LvpE51Vq9ixrA9GtsBEk+kDZMO1+gLLiAiW+rIA7aD
IUUJBqPG0/u12Wfq60CuyKUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398252813552054708027646970474140774903594
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 08:30:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 08:30:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cejam.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841711699139109360022710235758186956056853342654789144651344344576100198465393263439585550899390128912340246280723609239875607801180290046384527265273489948458329828828805338885384851405887526261384494705143812082555084736255929768668296535746876416651740598834789642991480265621603962311899863086206322273374620229175378740089733090224431009044642670641891435655757815584949857757565282285129543865432900100422794815642590993981956724025791840579819986770391442415349316355469511478358074049260859207988992833061627132965896349310658926128508094633440873508719712934965338662920736035849970749202308298433641339652883831345380250819311206315696356563416430176810042626895723223284935665939982099306838543902821346814969917077825246973033275590905772240913147942850722815866683928767674034244272882870948909385349761321325614134811757965567339389973874510056399798618034591285028444212686567289069800254314310472331639706880987981349822305721293359388275029214731581518945354076113732942364407199976938795912035125646447495491883585738551786089713710785563718197264774727135790242345395463119217397633778977604404500029654071339270600272452269237360170174371193403801665293772524108398804253209043000918832711499856228570209264257189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dda16496db702a9a6c596656e38943b5886e65e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1874 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3dproductspro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6oup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abitaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adfeedbackhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aktivkohlepulver.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aprendionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivohomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aykutblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beautyexpousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.britsishgas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bullstreetauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cadeauxfrancais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calperm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cejam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chilisextube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chocola-chocola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnmis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosohuuphat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.figuire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gay-fisting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getridofjugglers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grrmf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guernseyscraprecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linseydawnofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lreevent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marzettis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newchannel9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuclearcarepartnersquickbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obstetrician.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offencive-security.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onaytv7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parkinsonvoice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petesperformancewiring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saudi-shop.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sgcookieco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skkvwnv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todowuarras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truyen3d.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twinkspired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitedhealthcareprovider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uwcsl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vicbagger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wangdatradingmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webmail10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weddingphotographyphotos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yaghtworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dproductspro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6oup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abitaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfeedbackhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktivkohlepulver.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprendionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivohomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aykutblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautyexpousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britsishgas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullstreetauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadeauxfrancais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calperm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cejam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilisextube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocola-chocola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnmis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosohuuphat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'figuire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gay-fisting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getridofjugglers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grrmf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guernseyscraprecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linseydawnofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lreevent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marzettis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newchannel9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuclearcarepartnersquickbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obstetrician.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offencive-security.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onaytv7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkinsonvoice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petesperformancewiring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saudi-shop.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgcookieco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skkvwnv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todowuarras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truyen3d.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinkspired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedhealthcareprovider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uwcsl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vicbagger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wangdatradingmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddingphotographyphotos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaghtworld.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e183fa3340000040300483046022100b02983d649c33b8ceec6a1f47d76e37d4e6ee4d5be942553a8c60d2d8d633f5e022100fda8da4640a4d3d0bf28a5427383d7b09d529cb5b339190d3ba6d38e748c36d8007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e183fa3350000040300483046022100a7c42bda0a9d835cd984fcfb2065522a90190951ee516c45d07267812d37d9d6022100eb64df6671aaf4d888bc464d21cd55826f7fd37311d65bc02eaf170309587041
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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