geigermeatstore.com

Issued by R3

About this certificate

This digital certificate with serial number 04:13:83:5b:3f:86:a8:22:f6:01:00:fc:b4:a6:d1:09:a3:1a was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=geigermeatstore.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:13:83:5b:3f:86:a8:22:f6:01:00:fc:b4:a6:d1:09:a3:1a
Serial Number (int): 355089111353461182594779494026875480154906
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bf:2c:78:de:63:06:68:4d:7d:e1:59:85:68:58:e5:67:5e:b7:ce:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3e:9d:8d:e7:98:90:d7:fa:c6:d5:23:9e:8e:8e:9e:0a:4f:9d:58:b6
Fingerprint (sha256): e4:6b:a7:ee:50:d3:50:be:6b:f3:d6:a1:8c:c3:4b:24:46:a6:33:c8:93:cd:70:34:6e:bb:98:5a:34:d3:96:a9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate geigermeatstore.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geigermeatstore.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.activeseniorlivingfl.com
*.afterbed.com
*.ajshonduras.org
*.ajudandotodos.com
*.bitcoingrocery.com
*.bitcoinmaildrop.com
*.bitcoinmaniacs.com
*.bitcoinmobi.com
*.bitcoinsexshop.com
*.bitcoinsomalia.com
*.bloxcrusher.co
*.brannick.com
*.cafecoaches.com.au
*.carrucho.com
*.colostrum100.com
*.cryptolaundry.com
*.cungcap.com
*.descargasmix.biz
*.energycheats.cc
*.feeders.com.au
*.feelinggroovyateaglecreekranch.com
*.gadgetinsider.net
*.gears.com.au
*.geigermeatstore.com
*.hellofuture.com.au
*.hooks.com.au
*.kiamba.com
*.kimwah.com
*.lahistoriadelrock.com
*.laptopcase.com.au
*.lasana.com
*.legends.blue
*.lesgitesdelermitage.com
*.magpie.au
*.managingstress.com.au
*.meatgrinders.com.au
*.naples.com.au
*.northcliffe.tv
*.ocehloechl.com
*.olemiss.us
*.oqvideo.xyz
*.petersabo.co
*.realtshirts.com
*.rogt.com
*.setecooop.co
*.tibantis.info
*.um-ap.com
*.valteau.com
*.yujinxiang.com
activeseniorlivingfl.com
afterbed.com
ajshonduras.org
ajudandotodos.com
bitcoingrocery.com
bitcoinmaildrop.com
bitcoinmaniacs.com
bitcoinmobi.com
bitcoinsexshop.com
bitcoinsomalia.com
bloxcrusher.co
brannick.com
cafecoaches.com.au
carrucho.com
colostrum100.com
cryptolaundry.com
cungcap.com
descargasmix.biz
energycheats.cc
feeders.com.au
feelinggroovyateaglecreekranch.com
gadgetinsider.net
gears.com.au
geigermeatstore.com
hellofuture.com.au
hooks.com.au
kiamba.com
kimwah.com
lahistoriadelrock.com
laptopcase.com.au
lasana.com
legends.blue
lesgitesdelermitage.com
magpie.au
managingstress.com.au
meatgrinders.com.au
naples.com.au
northcliffe.tv
ocehloechl.com
olemiss.us
oqvideo.xyz
petersabo.co
realtshirts.com
rogt.com
setecooop.co
tibantis.info
um-ap.com
valteau.com
yujinxiang.com

Other certificates including the domain name geigermeatstore.com

(limited to 100 certificates)
*.geigermeatstore.com
geigermeatstore.com
*.geigermeatstore.com
geigermeatstore.com
geigermeatstore.com
geigermeatstore.com
*.geigermeatstore.com
geigermeatstore.com
geigermeatstore.com
geigermeatstore.com
geigermeatstore.com
geigermeatstore.com

Certificate

The complete raw certificate details for geigermeatstore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355089111353461182594779494026875480154906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 13:44:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 13:44:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geigermeatstore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 615833292712830747684683277336196813571824939460387357234409213378224487158737979298603370711079427080447307477492249327415653124434625970966961940979891474452676461204939983380794907792756277462746634719212107882495667755937897693849576834614905469485273107089598523018289357576391013368207078623185386325951993929811197432200605034283205598367066393205347290182887703611548071942766920158295516960878449376298499882746137869463852846047942262876423324492275180219360964264813249710048704268052527125246294587442176069176664239893007727351699670342239965756688843010660600684218237797216835438992247677428148809678208762974885258399133700474482898768774673158687944984996478274751419710919551261525836608832877068179765210135807926767041768199578568629473136020920129219579159616843300715615545696813073065807471289843122437326587670311685787771300614074009171299095583427594100440001960381301287349267321677058467093948375351905395181400663499183372757316316310820514491947961626558239595610215463857628819837528846694805564334390343269420955569707337213363708437605589174401424253912327348438132053946471719660962611426130313082415472797190422016280903878646211513471246925891396337762905129578703583479765798641687922927493712643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf2c78de6306684d7de159856858e5675eb7ce95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1776 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activeseniorlivingfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afterbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajshonduras.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajudandotodos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoingrocery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinmaildrop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinmaniacs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinmobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinsexshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinsomalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloxcrusher.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brannick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafecoaches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrucho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colostrum100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptolaundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cungcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.descargasmix.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.energycheats.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feeders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feelinggroovyateaglecreekranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadgetinsider.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gears.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geigermeatstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofuture.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiamba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimwah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lahistoriadelrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laptopcase.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legends.blue'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesgitesdelermitage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magpie.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managingstress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meatgrinders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naples.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northcliffe.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocehloechl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olemiss.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oqvideo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petersabo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realtshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rogt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.setecooop.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tibantis.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.um-ap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valteau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yujinxiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activeseniorlivingfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajshonduras.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajudandotodos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoingrocery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinmaildrop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinmaniacs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinmobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinsexshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinsomalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloxcrusher.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brannick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafecoaches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrucho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colostrum100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptolaundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cungcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descargasmix.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energycheats.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feelinggroovyateaglecreekranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadgetinsider.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gears.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geigermeatstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofuture.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiamba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimwah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahistoriadelrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laptopcase.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legends.blue'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesgitesdelermitage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpie.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managingstress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meatgrinders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naples.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcliffe.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocehloechl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olemiss.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oqvideo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petersabo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setecooop.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tibantis.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'um-ap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valteau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yujinxiang.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd896e3e9000004030047304502200a1d762174dc121f5074a410850a8a3abc0f32b9c289c7d66f61a38d2966a045022100c5b3959f20c792b72a4862754cfbc1af71c3ce53ac75d7dfad233a05603e91ae007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bd896e4920000040300473045022100eb59b83018c0d7ff9526093e44e5169f5d596caffef425679ca45a2c44113e0302205ab87125b77938d1983f7256372ab24f305a891876602d7540dcbd3dda9e2946
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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