kantobeken.com

Issued by R3

About this certificate

This digital certificate with serial number 04:41:2f:40:1c:55:0f:19:ba:1b:97:c4:31:22:00:0c:9b:ae was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kantobeken.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:2f:40:1c:55:0f:19:ba:1b:97:c4:31:22:00:0c:9b:ae
Serial Number (int): 370630304174349360079730867308089769237422
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 30:ef:ea:f6:9d:35:cb:9b:14:39:a8:de:8c:bf:1f:b5:52:ee:54:a7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:19:54:95:ea:f3:5b:c1:4c:78:48:4f:eb:0a:ff:a7:ef:02:f3:cf
Fingerprint (sha256): e3:5f:33:30:5d:7c:5a:ea:80:1f:95:04:5e:5e:b6:99:eb:05:31:4e:0a:18:c2:5e:d8:22:10:60:eb:f2:25:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kantobeken.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kantobeken.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abattoir.com.au
*.americanconsumercables.com
*.anages.com
*.baixarcursosgratis.com
*.berlin-gas.de
*.blackriver.com.au
*.brickseel.com
*.celebritysmiles.com.au
*.clubgtkolkata.com
*.companyformation.com.au
*.dhstarr.com
*.draftingchairs.com.au
*.driverscourse.info
*.fitzroyislandaccommodation.com.au
*.freebigtitss.com
*.getmtnd.com
*.hackarmoury.com
*.hospitalitycourse.com.au
*.housevaluation.com.au
*.indee.com.br
*.ita-spa.com
*.kantobeken.com
*.lacreatureandyou.com
*.libreriacimientodevida.com
*.massimudutti.com
*.memorialplaques.com.au
*.modems.com.au
*.nudeyoga.com.au
*.onlinebible.com.au
*.proteindiet.com.au
*.qcm-pro.com
*.redhair.com.au
*.roofinginsulation.com.au
*.sanglardpurri.com
*.scuolasangiuseppeanzio.com
*.sewithmuslims.com
*.speechtherapist.com.au
*.spyware.com.au
*.sydneycaterers.com.au
*.sylvesterveranstaltungen.de
*.thebeach-samui.com
*.theyouliss.com
*.unlimitedchecking.com
*.uqmu.org
*.usavisa.com.au
*.usservicedogregistration.com
*.vball.com
*.vilk.com
*.xxszg.com
*.yt770.org
abattoir.com.au
americanconsumercables.com
anages.com
baixarcursosgratis.com
berlin-gas.de
blackriver.com.au
brickseel.com
celebritysmiles.com.au
clubgtkolkata.com
companyformation.com.au
dhstarr.com
draftingchairs.com.au
driverscourse.info
fitzroyislandaccommodation.com.au
freebigtitss.com
getmtnd.com
hackarmoury.com
hospitalitycourse.com.au
housevaluation.com.au
indee.com.br
ita-spa.com
kantobeken.com
lacreatureandyou.com
libreriacimientodevida.com
massimudutti.com
memorialplaques.com.au
modems.com.au
nudeyoga.com.au
onlinebible.com.au
proteindiet.com.au
qcm-pro.com
redhair.com.au
roofinginsulation.com.au
sanglardpurri.com
scuolasangiuseppeanzio.com
sewithmuslims.com
speechtherapist.com.au
spyware.com.au
sydneycaterers.com.au
sylvesterveranstaltungen.de
thebeach-samui.com
theyouliss.com
unlimitedchecking.com
uqmu.org
usavisa.com.au
usservicedogregistration.com
vball.com
vilk.com
xxszg.com
yt770.org

Other certificates including the domain name kantobeken.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for kantobeken.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370630304174349360079730867308089769237422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 20:48:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 20:48:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kantobeken.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825197688611605466088982483809424392920888933799865572281469335511941376917478154741226834882245231077814871042575513005627824799732838994768551919392726434442346799077358105684807853411542026766243689360338584901372878903236855069931455439731473711957848140171580925383702085406346712238000067865538509557560393306013969269577939832408207700485180690661791274500726018815283770937822182175722847120020107506529892186310972830023708141265870296063668383658596814397024357610684073401758428023185654380439920673532395319293940179157723501342984777295648788566975335187664454497507543378931036750884819261333605933438465358309783391440135484068369446566490640356263699343645821057324277963773588931727359567070112915532590934057415891940882794232980309408565081379646579900455129717790428221977428715034202021996741799882066711663148174512180661069207940979454343399708815955470005104081928799259039055670723557725294775348350088720643094732423400405787120036715599897891424907487723366991284333646890159707872178659638767360143705169632744558331804734556184719260554942901284372381986797785198380652027740701730178832829017772967561652723551475185366020863534301337708776035602930668885224296724270744090492560463058152199434826361397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30efeaf69d35cb9b1439a8de8cbf1fb552ee54a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2032 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abattoir.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanconsumercables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baixarcursosgratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berlin-gas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackriver.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brickseel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celebritysmiles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubgtkolkata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.companyformation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dhstarr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.draftingchairs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.driverscourse.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitzroyislandaccommodation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freebigtitss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmtnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hackarmoury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hospitalitycourse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housevaluation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indee.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ita-spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kantobeken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacreatureandyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libreriacimientodevida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.massimudutti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.memorialplaques.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modems.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nudeyoga.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinebible.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proteindiet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qcm-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redhair.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roofinginsulation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanglardpurri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scuolasangiuseppeanzio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sewithmuslims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speechtherapist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spyware.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sydneycaterers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sylvesterveranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebeach-samui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theyouliss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unlimitedchecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uqmu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usavisa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usservicedogregistration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vilk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxszg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yt770.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abattoir.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanconsumercables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baixarcursosgratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlin-gas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackriver.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brickseel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebritysmiles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubgtkolkata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyformation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhstarr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draftingchairs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driverscourse.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitzroyislandaccommodation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freebigtitss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmtnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackarmoury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitalitycourse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housevaluation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indee.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ita-spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kantobeken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacreatureandyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libreriacimientodevida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massimudutti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memorialplaques.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modems.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nudeyoga.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinebible.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proteindiet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qcm-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redhair.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofinginsulation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanglardpurri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuolasangiuseppeanzio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sewithmuslims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speechtherapist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spyware.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneycaterers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylvesterveranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebeach-samui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theyouliss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlimitedchecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uqmu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usavisa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usservicedogregistration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vilk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxszg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yt770.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bb0e8be3a0000040300473045022100b5272acf5de522e4b49dc8b9fb90256e695b24a4a397da250bb911a21787d3a902202a964c9232c6ce0d262447574bdd5c90fad781f9a9c7abc542ca9c152808c8fb0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bb0e8be3a000004030047304502206608dba3da3f143ce2410a25f2edb522b1a4aa2d4a56f7fa6bca75cd1889ec87022100b9f9c5a54bd8d1b1f23c7116d49010ff2f94510267760b277a266c7a634cbbc0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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