blueberry-blewbury.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:06:ae:46:e5:c6:2c:d0:dc:6a:1a:4f:52:74:4d:41:6b:4a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=blueberry-blewbury.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:06:ae:46:e5:c6:2c:d0:dc:6a:1a:4f:52:74:4d:41:6b:4a
Serial Number (int): 350722491720986135419032467099050330647370
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a0:a2:3f:58:3d:eb:91:fe:e1:57:cd:10:2f:1d:5e:a7:b6:70:92:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 80:ab:62:51:2a:ae:2d:40:01:42:3b:49:00:20:c3:74:6a:f4:10:7f
Fingerprint (sha256): df:c8:fa:08:d9:3a:14:a7:7e:86:0f:0c:32:cf:82:f3:d1:8e:02:bf:71:5b:28:da:bc:f4:a7:bf:7b:00:f6:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blueberry-blewbury.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blueberry-blewbury.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adsb.au
*.aerialwork.au
*.aerodrome.au
*.afap.au
*.aircraftspruce.au
*.amavip.me
*.atpl.au
*.australianaviationjobs.au
*.avgas.au
*.bakabt.com
*.bdv.no
*.bebylist.com
*.bible1.com
*.blueberry-blewbury.co.uk
*.calgarylabservies.com
*.chatyume.com
*.climbers.org
*.cockpit.au
*.designbaji.com
*.deutscge-bank.de
*.disposablecartridges.com
*.faord.com
*.fixedwing.au
*.gaminssh.com
*.halesautosales.com
*.handyfeelings.com
*.hanmingintl.com
*.heroturko.org
*.highfidelity.com.au
*.ideaai.net
*.ipaddicas.com
*.johnsonwindow.com
*.khatrimaja.com
*.laclassifieds.com
*.latimerish.com
*.matureteacherxxx.com
*.mcnealherrenhose.co
*.metalstorm-uk.com
*.minusbox.com
*.nfhsnrtwork.com
*.preply.co
*.realsatisified.com
*.richbon.net
*.rotita.co
*.sampasite.com
*.ssenes.com
*.thinkoptions.com
*.voa-study.net
*.wwwadomyinfo.com
*.zepur.com
adsb.au
aerialwork.au
aerodrome.au
afap.au
aircraftspruce.au
amavip.me
atpl.au
australianaviationjobs.au
avgas.au
bakabt.com
bdv.no
bebylist.com
bible1.com
blueberry-blewbury.co.uk
calgarylabservies.com
chatyume.com
climbers.org
cockpit.au
designbaji.com
deutscge-bank.de
disposablecartridges.com
faord.com
fixedwing.au
gaminssh.com
halesautosales.com
handyfeelings.com
hanmingintl.com
heroturko.org
highfidelity.com.au
ideaai.net
ipaddicas.com
johnsonwindow.com
khatrimaja.com
laclassifieds.com
latimerish.com
matureteacherxxx.com
mcnealherrenhose.co
metalstorm-uk.com
minusbox.com
nfhsnrtwork.com
preply.co
realsatisified.com
richbon.net
rotita.co
sampasite.com
ssenes.com
thinkoptions.com
voa-study.net
wwwadomyinfo.com
zepur.com

Other certificates including the domain name blueberry-blewbury.co.uk

(limited to 100 certificates)
blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
blueberry-blewbury.co.uk
msibeutystudio.com
www.blueberry-blewbury.co.uk
winboynton.net
tamilviral.net
blueberry-blewbury.co.uk
blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
blueberry-blewbury.co.uk
blueberry-blewbury.co.uk
www.blueberry-blewbury.co.uk
blueberry-blewbury.co.uk
cauton.com
www.blueberry-blewbury.co.uk

Certificate

The complete raw certificate details for blueberry-blewbury.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350722491720986135419032467099050330647370
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 12:53:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 12:53:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blueberry-blewbury.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 913941117223878692841109473747885787684902778047150958387610931352449227714242292742444676567896872885552539047934606715687363221454949560621753059710942332609745634893845880245650203607935202982948379216839775134893819696937335968954021430978136377213603360367662370797137802208643765766378290155198864687320824241946411621000862331189138071339051342626729708440951030475658566548971875106216022559474134412031535363900332449637944329753501343789512749657495214547947883702468398827162441942585415804432361506936834175329934900003514130266446611167914679768742156518547839357107237134994626712955518554152854407020671279365421412601191688564728772846472268792278078406550229372786120242755407812397759484424866250342115839221353431788184010030022285382693638364181643572937800139226709173530638277140014275298115760521716166341599703785560229893989100491768380479077773295074276493497601280175922014586384507346135839779000649858558622194053706193703939305096710021400148721092302939681190961992784726871146850474474318689978265579775800894773913995525087202930406337605687584362220528568686808667903139843734983692215333832089750867220818356899623225911785290248995201559101884336743632805953880439662001039000738006333494330282083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0a23f583deb91fee157cd102f1d5ea7b67092ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1670 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adsb.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerialwork.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerodrome.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afap.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aircraftspruce.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amavip.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atpl.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.australianaviationjobs.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avgas.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakabt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bdv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bebylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bible1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blueberry-blewbury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calgarylabservies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatyume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.climbers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cockpit.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designbaji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deutscge-bank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disposablecartridges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixedwing.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaminssh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halesautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handyfeelings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanmingintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heroturko.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highfidelity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ideaai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipaddicas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnsonwindow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khatrimaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laclassifieds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latimerish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matureteacherxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcnealherrenhose.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metalstorm-uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minusbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfhsnrtwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preply.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realsatisified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.richbon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotita.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sampasite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssenes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thinkoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voa-study.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwadomyinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zepur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsb.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerialwork.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerodrome.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afap.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aircraftspruce.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amavip.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atpl.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australianaviationjobs.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avgas.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakabt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bebylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bible1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueberry-blewbury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calgarylabservies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatyume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climbers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockpit.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designbaji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutscge-bank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disposablecartridges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixedwing.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaminssh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halesautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handyfeelings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanmingintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heroturko.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highfidelity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideaai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipaddicas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsonwindow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khatrimaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laclassifieds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latimerish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matureteacherxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcnealherrenhose.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metalstorm-uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minusbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfhsnrtwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preply.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realsatisified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richbon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotita.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sampasite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssenes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voa-study.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwadomyinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zepur.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a991e075a000004030047304502205226fe0e708346ed7a81a608c54ab3588cf65b9c2ece7cfb59955db6964bd1c0022100a5da6653b3d17d11f7943f0714d7c9efb91b08f9133cc7e4326889f31d269615007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a991e07950000040300463044022014f17d1ceddfa0c4e3b7792d7358e5f907fcc7cddb3a91a8355174898c7bd405022073c1f4e4558e0b6eb5dfd04c0738955d03ff343d52d414bcc6f024b234e3b4ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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