tojin.com

Issued by R3

About this certificate

This digital certificate with serial number 03:0b:29:52:89:2b:9f:86:ff:f1:7c:9b:ff:0c:03:55:ef:47 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tojin.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:29:52:89:2b:9f:86:ff:f1:7c:9b:ff:0c:03:55:ef:47
Serial Number (int): 265134890729726942454295149107283079065415
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:f8:a9:f4:6f:ea:f8:ec:bd:10:9b:f3:2e:25:67:7e:c7:c6:a3:22
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:99:b0:5f:8a:af:35:86:45:09:ac:9b:df:7c:8f:b3:5d:18:ef:3c
Fingerprint (sha256): da:70:9d:56:83:3b:02:03:ce:01:e6:0a:7a:fa:74:bf:a1:e5:60:6e:0b:5c:4c:1e:a1:5b:e6:ec:d1:45:56:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tojin.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tojin.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.16avav.info
*.4i0.me
*.aiscalper.com
*.andreas.au
*.brandons.services
*.cannoodt.com
*.capcaps.me
*.clm205.xyz
*.compare.place
*.crossfitdaemon.com
*.desibanle.me
*.dialogar.com
*.drtuber.us
*.eldeber.co
*.elitech.pro
*.elizabelle.me
*.examinar.com
*.exclusivism.com
*.hamkar.com
*.igualvc.me
*.italiennichtverschreibflichtige.me
*.javsfor.me
*.klak.com
*.labalsa.com
*.limitesacesso.me
*.macbryde.com
*.mayor.au
*.meet-you.me
*.mentione.me
*.niidakozo.net
*.nitza.com
*.noitez.me
*.olympicsstream.me
*.onei.me
*.powerfitnessjo.com
*.sattamstka.me
*.sempfe.me
*.sintoma.me
*.stream-tv2.la
*.tojin.com
*.veias.me
*.viajesito.me
*.w3segproitez.me
*.w9mostrarnecessario.me
*.welche.me
*.willlee.me
*.worldsat.live
*.x-minus1.me
*.zouza.com
16avav.info
4i0.me
aiscalper.com
andreas.au
brandons.services
cannoodt.com
capcaps.me
clm205.xyz
compare.place
crossfitdaemon.com
desibanle.me
dialogar.com
drtuber.us
eldeber.co
elitech.pro
elizabelle.me
examinar.com
exclusivism.com
hamkar.com
igualvc.me
italiennichtverschreibflichtige.me
javsfor.me
klak.com
labalsa.com
limitesacesso.me
macbryde.com
mayor.au
meet-you.me
mentione.me
niidakozo.net
nitza.com
noitez.me
olympicsstream.me
onei.me
powerfitnessjo.com
sattamstka.me
sempfe.me
sintoma.me
stream-tv2.la
tojin.com
veias.me
viajesito.me
w3segproitez.me
w9mostrarnecessario.me
welche.me
willlee.me
worldsat.live
x-minus1.me
zouza.com

Other certificates including the domain name tojin.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tojin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265134890729726942454295149107283079065415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 18:18:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 18:18:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tojin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866937924727169893373890319356712229163487452051264500283365910617481263234641907730557225742107478318874289607824038210627634705698341859768584296901168750413748103451927505532662963250182800860849363319611664270592139187104556225437361194812517376141048432578117590065431494770327282657573735960886508553792698698430059848365638460164068463063930141922406237786225807564587790641171818170360024952589538919558947088046448326757925966112251506596727488506983286314413650922280742554164780744077998873889219779094050416263453442023705934110792961538447317581948823368980527858490613709152739527329349821057014010376082368381263672265333664945191455371302173751210610228710900485801171520082687297650169431398489363868314586187462240028451283856644619218286456331934111752936288991236022335367460108129791042260580873525780529888728065562427385525728026507445357451285054782679609185667251932317507457354542717601896055779158564322872145240866003029726050527604338915426930354558258384950532165262090530471270639918098727775328481094441829447386457135052532066721817967354329073938431793786780839757300142601007823297851424653782983236668301629186743880843135415849571922318011555726640868357449050582032948413304738533385037502795317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68f8a9f46feaf8ecbd109bf32e25677ec7c6a322
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1482 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.16avav.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4i0.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiscalper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andreas.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandons.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannoodt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capcaps.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clm205.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compare.place'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crossfitdaemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desibanle.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dialogar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drtuber.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eldeber.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elitech.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elizabelle.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.examinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exclusivism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamkar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.igualvc.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.italiennichtverschreibflichtige.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javsfor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labalsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.limitesacesso.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macbryde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meet-you.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mentione.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niidakozo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nitza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noitez.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olympicsstream.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onei.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerfitnessjo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sattamstka.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sempfe.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sintoma.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stream-tv2.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tojin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veias.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viajesito.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.w3segproitez.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.w9mostrarnecessario.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welche.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willlee.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldsat.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.x-minus1.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zouza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16avav.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4i0.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiscalper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andreas.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandons.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannoodt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capcaps.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clm205.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compare.place'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossfitdaemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desibanle.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtuber.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eldeber.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitech.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elizabelle.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exclusivism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamkar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igualvc.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italiennichtverschreibflichtige.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javsfor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labalsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limitesacesso.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macbryde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet-you.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentione.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niidakozo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noitez.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicsstream.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onei.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerfitnessjo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sattamstka.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sempfe.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sintoma.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream-tv2.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tojin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veias.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viajesito.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w3segproitez.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w9mostrarnecessario.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welche.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willlee.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldsat.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x-minus1.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zouza.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d51822f110000040300483046022100df48f050547c36be18f0458244283f785ae58452a0924521cd2fc8e7ec353d930221009171934d0b83060e92f8fabb95164c503c2db17fea40cd650929d78e6cd25fb2007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d51822f460000040300463044022053185b3e11e14fba078d878b0d329f4f5f3af749eeba32e94b9d3729fdeb0c1402206114a50a1d9fb6ea71470d5e3a49f22887b1dbb3d4ceb455c95fe03bbcf8879d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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