theministry.com.au

Issued by R3

About this certificate

This digital certificate with serial number 04:19:55:f8:f0:17:aa:7e:7e:01:c1:34:25:e8:1b:3f:bd:ca was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=theministry.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:19:55:f8:f0:17:aa:7e:7e:01:c1:34:25:e8:1b:3f:bd:ca
Serial Number (int): 357070479838980400645131089355765310275018
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0d:39:dd:ae:e8:34:0d:56:9e:88:54:0c:73:ac:92:0d:a1:6b:c6:9c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cd:6d:55:d1:a4:90:cb:07:09:0a:df:3d:10:72:f9:ee:cb:3a:12:44
Fingerprint (sha256): e2:5e:f7:43:e6:9c:46:35:e3:66:c6:06:36:58:b2:90:93:f0:64:35:d3:f4:f2:24:b3:93:23:6a:95:6c:a1:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate theministry.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for theministry.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2712.com.au
*.3250.com.au
*.3352.com.au
*.37degrees.us
*.3isk.us
*.4230.com.au
*.44boardshop.us
*.6109.com.au
*.7yt3.us
*.aaronagriculture.us
*.aboutlaw.us
*.abstrup.us
*.aptis.us
*.bababia.com.cn
*.beaconhealthsystems.org
*.bitcoinex.ca
*.bodyandsoulleb.org
*.bookcine.com
*.citykonditoriet.com
*.daddlivehd.sx
*.dlinkapp-local.com
*.dogparks.com.au
*.elitebeauty.co
*.fezaiplik.com
*.ffa.in
*.finnmaccoolspub.com
*.fmoviesto.me
*.fmovis.to
*.harperroofingllc.com
*.homeadvsior.com
*.instafollowes.co
*.kuobing.com
*.makeueof.com
*.nba2kcapbreakers.com
*.nviromentdesign.com
*.offgridskoolie.com
*.paysdeprojets.org
*.plazaarthurbuies.com
*.rabochiyfront.org
*.short-url.me
*.startcode.co
*.strin.com
*.symanttec.com
*.theministry.com.au
*.vtlgbtcaucus.org
*.waifwar.com
*.wwwbit.ly
*.xn--standboxscke-ocb.de
*.xxxvideostubes.com
*.zcssfm.cn
2712.com.au
3250.com.au
3352.com.au
37degrees.us
3isk.us
4230.com.au
44boardshop.us
6109.com.au
7yt3.us
aaronagriculture.us
aboutlaw.us
abstrup.us
aptis.us
bababia.com.cn
beaconhealthsystems.org
bitcoinex.ca
bodyandsoulleb.org
bookcine.com
citykonditoriet.com
daddlivehd.sx
dlinkapp-local.com
dogparks.com.au
elitebeauty.co
fezaiplik.com
ffa.in
finnmaccoolspub.com
fmoviesto.me
fmovis.to
harperroofingllc.com
homeadvsior.com
instafollowes.co
kuobing.com
makeueof.com
nba2kcapbreakers.com
nviromentdesign.com
offgridskoolie.com
paysdeprojets.org
plazaarthurbuies.com
rabochiyfront.org
short-url.me
startcode.co
strin.com
symanttec.com
theministry.com.au
vtlgbtcaucus.org
waifwar.com
wwwbit.ly
xn--standboxscke-ocb.de
xxxvideostubes.com
zcssfm.cn

Other certificates including the domain name theministry.com.au

(limited to 100 certificates)
cateringtrucks.com.au
myemailsrvr.com
rlg.us
theministry.com.au
theministry.com.au
theministry.com.au
theministry.com.au
batepapogratis.net
theministry.com.au
theministry.com.au
wwwcitapreviadni.es

Certificate

The complete raw certificate details for theministry.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357070479838980400645131089355765310275018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 14:53:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 14:53:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theministry.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772488858312457464217385720202648390782060578733417386759267326004951587170792673551551163447912447316152425686026999381305437331936207786681693184707332555136015531773925320183099648675240590659069779280211134828820778196185937219147648375811363711656299955314261162718004004543424775536035635981768915962575913971689886024539781128870357977110029064357776862975714248113694095517368484560177662617548552594276989434713377404481992921017814976151915389281279908560746710226474070676167216401658375493916966257828368686376222873237829601473265291815193891062943059513369417136792576446111804874832300974858616459085280193980358790776712172926712301289475330511547277645081046760816074359553783247926556039423058324185835842331039394388498157568855267053493168932750768078770258380909047670918341252643324450072978586311398463681745098220108180104030475390166307719971949122733153232423161974832085051038579305890428196569663271153189415968232977203410317365193770857911229583420581307268428740605012082123360565973692680559170916791609276085479984812474698781136929941531934182539438347598006289731536399269334990440828444620303283491698199248373074158466754561068613786245716205852831015797175615284306574177239120729174921257769713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d39ddaee8340d569e88540c73ac920da16bc69c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1694 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2712.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3250.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3352.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.37degrees.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3isk.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4230.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.44boardshop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6109.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7yt3.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaronagriculture.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aboutlaw.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abstrup.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aptis.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bababia.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beaconhealthsystems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodyandsoulleb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookcine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citykonditoriet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daddlivehd.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlinkapp-local.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogparks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elitebeauty.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fezaiplik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finnmaccoolspub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmoviesto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmovis.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harperroofingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeadvsior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instafollowes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuobing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makeueof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nba2kcapbreakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nviromentdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offgridskoolie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paysdeprojets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plazaarthurbuies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rabochiyfront.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.short-url.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startcode.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symanttec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theministry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vtlgbtcaucus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waifwar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbit.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--standboxscke-ocb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxxvideostubes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zcssfm.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2712.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3250.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3352.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '37degrees.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3isk.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4230.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '44boardshop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6109.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7yt3.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaronagriculture.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutlaw.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abstrup.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptis.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bababia.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaconhealthsystems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodyandsoulleb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookcine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citykonditoriet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daddlivehd.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlinkapp-local.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogparks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitebeauty.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fezaiplik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finnmaccoolspub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmoviesto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmovis.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harperroofingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeadvsior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instafollowes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuobing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeueof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba2kcapbreakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nviromentdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offgridskoolie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paysdeprojets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plazaarthurbuies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabochiyfront.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'short-url.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startcode.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symanttec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theministry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtlgbtcaucus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waifwar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbit.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--standboxscke-ocb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxxvideostubes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zcssfm.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d9e061dca000004030047304502207ccac5850bd0b0e50a10e71e02815da9168d8bd67a54f05c5dcb99f83b41fbaa0221008446b29f530bbf7f51fd0e9e0650c799d9c490622c810d4ff369a2ddddaa99af007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d9e061dce0000040300473045022100ef0711a75e7dd59533dc2c3f1f3292f9f446fdfc002bbccab2f97255549823150220382d64bbbff036ace866d342b1ed60d8ccf3fdad07d41372e6d91f936e564c2d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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