totkik.com

Issued by R3

About this certificate

This digital certificate with serial number 04:82:b6:97:1e:77:42:59:6f:c6:e6:27:84:60:9e:f6:5c:e2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=totkik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:82:b6:97:1e:77:42:59:6f:c6:e6:27:84:60:9e:f6:5c:e2
Serial Number (int): 392928555576742453866220140629587347791074
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4c:c7:0e:46:32:fe:b8:f2:4b:88:90:d4:83:61:dd:4d:47:24:7d:d2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:ff:53:d2:2c:f8:3f:f2:c7:9c:ae:aa:8a:84:c8:9a:3a:4d:4b:58
Fingerprint (sha256): e3:06:6a:5b:1c:49:cf:5a:16:c3:c5:6d:b5:c4:30:a0:9d:f0:6f:d0:11:24:7d:d2:c7:e2:9c:78:33:dd:ec:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate totkik.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for totkik.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3shroon.com
*.agenciatriunfo.com
*.alyssaotto.com
*.america-club.com
*.ashwitha.com
*.avanquest.au
*.banayedanesh.com
*.buildabearvile.com
*.centromedicobidasoa.com
*.chambres-lanternes-kaysersberg.com
*.coastaldigitalmarketingagency.com
*.colegiomadreteresaflorenciovarela.com
*.druzi-club.com
*.dsaiugbgfc8pp.com
*.ecointermodal.net
*.eeaccleaningservice.com
*.fait.au
*.free-online-training-course.com
*.gcinnovationamerica.com
*.hilangderita.com
*.idiot-simple.net
*.indoreeducationhub.com
*.itube.life
*.khouhouston.com
*.ktdrujba.net
*.lanuovapellet.com
*.madanitour.com
*.nanazi.com
*.nastyrat.tv
*.nationalboxerpuppiesrescue.com
*.officiallavine.com
*.onelookstreetstyle.com
*.orderqueloqueny.com
*.personglobaleditions.com
*.preyforeign.com
*.pwrseo.net
*.renos.au
*.smartfarm-organic.com
*.sunrainfireplace.com
*.suryadesigndisplay.com
*.thecornergrillshadyside.com
*.thoitrangodcvn.com
*.tilestorepa.com
*.torontodomainer.com
*.totkik.com
*.trimsixeof.be
*.unresolvedmystery.com
*.urbansurvivalguy.com
*.usream.tv
*.zmywak.uk
3shroon.com
agenciatriunfo.com
alyssaotto.com
america-club.com
ashwitha.com
avanquest.au
banayedanesh.com
buildabearvile.com
centromedicobidasoa.com
chambres-lanternes-kaysersberg.com
coastaldigitalmarketingagency.com
colegiomadreteresaflorenciovarela.com
druzi-club.com
dsaiugbgfc8pp.com
ecointermodal.net
eeaccleaningservice.com
fait.au
free-online-training-course.com
gcinnovationamerica.com
hilangderita.com
idiot-simple.net
indoreeducationhub.com
itube.life
khouhouston.com
ktdrujba.net
lanuovapellet.com
madanitour.com
nanazi.com
nastyrat.tv
nationalboxerpuppiesrescue.com
officiallavine.com
onelookstreetstyle.com
orderqueloqueny.com
personglobaleditions.com
preyforeign.com
pwrseo.net
renos.au
smartfarm-organic.com
sunrainfireplace.com
suryadesigndisplay.com
thecornergrillshadyside.com
thoitrangodcvn.com
tilestorepa.com
torontodomainer.com
totkik.com
trimsixeof.be
unresolvedmystery.com
urbansurvivalguy.com
usream.tv
zmywak.uk

Other certificates including the domain name totkik.com

(limited to 100 certificates)
totkik.com
totkik.com
totkik.com
totkik.com
totkik.com
totkik.com
www.totkik.com
totkik.com
totkik.com
totkik.com
totkik.com
*.3shroon.com
totkik.com
totkik.com

Certificate

The complete raw certificate details for totkik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1761CS8NwUSNB+4/GdFK
2mMNBd2V/G98Qj909oP0mpQFli+cS7+eywjq5pMbEFwlnHnxK6HcjfqGXY1vOC3V
dW1IhZ7ZXbhuJ0fVkrRWli83uZf+RgLwBRaOavpOaj7UjIeK2Q9y7lUWSIhiHmVl
PVd47EazzTXuzZBkP638e88vvRJOzB4fQ8d9jzXPjNBD9J066F1BDsRZN6ERU7cI
1VZjaKCsLXhS7+I6999018DA5LjqOA54nSwCP1GzOrMQ0fd6DFUny0JYEEoaIt7r
iQPJjSBM4W45KX+m6ZfZMYykuMrD6tEAk1v4REw3bAGY4DXqxLuIaD6KNzfdCen+
Z8ht/X1ABTn6O3Or7LrxH/EP4ixMVIl5IHv3DgwGd6sW0JpStS2KoE9ApyzoWo7T
jD+7IghBY6urynWof5XyS0Wi7ky9TkYu4sMXDy2hZ1/3/1l898aFWsDBIK2KGNS7
a60Tq8JRytdAa0cbRluY6DuXXRqileihFZHe6KE6MbCHxOMgfaTzGxqwjRZOOn4g
UP+lFpsYhRnLNqzSAGuxD8V0/SAPPUs60q9lmjpAZZ8ZNJPcJJReWbpIlgGfrvtj
hgiDsTs80+jl0hh7hlrPuuzEIJL+mou4xTkOkMlajz8Lfng207c9bOd1Ie9fjEmB
vyUpmQh14+XKbRc3sKL1IYMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392928555576742453866220140629587347791074
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 16:14:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 16:14:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'totkik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880162605016766757451333709946182062023847580919383646268556452752337435127795472350350825588875089733312288190971239456289847572563086043557612320422048093658646789500192091303093644361035808370973041268810226390483680916066884948234974925889566318578608111116962193535354857570200623886425792093178416972346756470681269774969616255158347543865127127031051364848713027350379233746811030499668366327541569061820504096781084863149178965845480318857029069010773976164228893123828196832513933781786751000472278771828124581005347892530475927565841471103203042202883961632583858770542349286570784358537583362258296607414069635467810518339831657226654523089584801523606273675823350654366152426525154984617437430070627225899699134352609827804732581152835414019180138609447851588648443437193516310091364582772284378009738642324221190369678098336354134209081020678597651196772759749305086793832424084954569940297862061935301477657376469160567981595674762694961885187009328356924652489855119496975951247377814048791602609496067694578939761133733754519008859050893193062310182370237008900139521094686651132220874113004478720046459906871060811479284964724835144025868869254796870184192370220931787598140812160288453915366542982901425187233014147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cc70e4632feb8f24b8890d48361dd4d47247dd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2082 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3shroon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agenciatriunfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alyssaotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.america-club.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashwitha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avanquest.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banayedanesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildabearvile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centromedicobidasoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chambres-lanternes-kaysersberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coastaldigitalmarketingagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colegiomadreteresaflorenciovarela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.druzi-club.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsaiugbgfc8pp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecointermodal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eeaccleaningservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fait.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.free-online-training-course.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gcinnovationamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hilangderita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idiot-simple.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indoreeducationhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itube.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khouhouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ktdrujba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lanuovapellet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madanitour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanazi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nastyrat.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalboxerpuppiesrescue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officiallavine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onelookstreetstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orderqueloqueny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personglobaleditions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preyforeign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pwrseo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renos.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartfarm-organic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunrainfireplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suryadesigndisplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecornergrillshadyside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thoitrangodcvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tilestorepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torontodomainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totkik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trimsixeof.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unresolvedmystery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbansurvivalguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usream.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zmywak.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3shroon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenciatriunfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alyssaotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'america-club.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashwitha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avanquest.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banayedanesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildabearvile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centromedicobidasoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chambres-lanternes-kaysersberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastaldigitalmarketingagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiomadreteresaflorenciovarela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druzi-club.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsaiugbgfc8pp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecointermodal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eeaccleaningservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fait.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'free-online-training-course.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcinnovationamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilangderita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idiot-simple.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indoreeducationhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itube.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khouhouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktdrujba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanuovapellet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madanitour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanazi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nastyrat.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalboxerpuppiesrescue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officiallavine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelookstreetstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderqueloqueny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personglobaleditions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preyforeign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwrseo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renos.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartfarm-organic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrainfireplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suryadesigndisplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecornergrillshadyside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoitrangodcvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilestorepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torontodomainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totkik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimsixeof.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unresolvedmystery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbansurvivalguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usream.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zmywak.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001889c011a310000040300473045022100bf5e4014dca4fbef2a7c0f3ee4ebbf15bf989a99d5ebdec5012085a7d02ca65702202dc4051a1816c9b50c062cc92910309afd7385e64d1a7b70c0d118636f2455bb0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001889c011a470000040300473045022008b23868a3ce8aee0c5c0a98eb8dea126712115ec5042deaa77a7a84e151c5ae022100ed0cd00d17e2e5e5efb3f283d72bdd24f56e8a1787c57763e7aac08391840185
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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