offenda.com

Issued by R3

About this certificate

This digital certificate with serial number 04:99:1e:35:f4:73:3f:bb:c9:ee:b5:46:c4:da:24:99:33:10 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=offenda.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:99:1e:35:f4:73:3f:bb:c9:ee:b5:46:c4:da:24:99:33:10
Serial Number (int): 400552502855590527876937384707229235098384
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ae:8c:f5:d6:26:ae:4c:2c:f9:c1:f2:84:76:9b:6a:1c:b5:8b:8e:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:f6:57:4e:9a:0e:ed:91:d9:89:de:bf:71:93:41:1d:52:83:18:5a
Fingerprint (sha256): e4:e2:60:56:c1:8c:8f:76:b7:5a:e8:79:19:65:9c:58:d5:ad:cd:5f:61:66:12:67:22:71:9b:21:d9:1b:cc:19

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate offenda.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for offenda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.11anime.net
*.1hgirl.com
*.20sogirl.co
*.aliexpe.com
*.ascentas.com
*.batdoc.com
*.casero69.com
*.chasea1.co
*.choiceadvantsge.com
*.chorac.com
*.chuyennhadat.co
*.cleansextube.com
*.coblix.co
*.desirulez.us
*.donmovil.com
*.ecologicallyproduced.com
*.fairwindgroup.co
*.femdomvip.com
*.filgentgenetics.com
*.flaviogbainvestimentos.co
*.gaminformer.com
*.gitllab.com
*.greytrip.com
*.htfashion.co.uk
*.imgwet.com
*.imsatv.com
*.kinogidrogen.com
*.ktownautosales.com
*.lennonnoah.co
*.mediadisk6.net
*.mekimeki.info
*.microsofhup.com
*.mortgageflex.com.au
*.mortgagerescue.com.au
*.mypervyfamily.co
*.northq.com.au
*.offenda.com
*.partesdeautos.com
*.payxhex.com
*.reappraisers.com
*.risveglio.com
*.sekisuihouse.co
*.thinxbig.co.uk
*.tilebrands.com
*.unarcrush.com
*.vansetistudio.com
*.w5m.co
*.wunderwheel.co
*.ww5n.co
*.xfinitystreamapp.com
11anime.net
1hgirl.com
20sogirl.co
aliexpe.com
ascentas.com
batdoc.com
casero69.com
chasea1.co
choiceadvantsge.com
chorac.com
chuyennhadat.co
cleansextube.com
coblix.co
desirulez.us
donmovil.com
ecologicallyproduced.com
fairwindgroup.co
femdomvip.com
filgentgenetics.com
flaviogbainvestimentos.co
gaminformer.com
gitllab.com
greytrip.com
htfashion.co.uk
imgwet.com
imsatv.com
kinogidrogen.com
ktownautosales.com
lennonnoah.co
mediadisk6.net
mekimeki.info
microsofhup.com
mortgageflex.com.au
mortgagerescue.com.au
mypervyfamily.co
northq.com.au
offenda.com
partesdeautos.com
payxhex.com
reappraisers.com
risveglio.com
sekisuihouse.co
thinxbig.co.uk
tilebrands.com
unarcrush.com
vansetistudio.com
w5m.co
wunderwheel.co
ww5n.co
xfinitystreamapp.com

Other certificates including the domain name offenda.com

(limited to 100 certificates)
offenda.com
offenda.com
offenda.com
offenda.com
theaddictions.org
keshishyan.com
offenda.com
smartpackage.buzz
offenda.com
offenda.com
shemalefetish.com
offenda.com
norplant72.com
tefillah.com
offenda.com
offenda.com

Certificate

The complete raw certificate details for offenda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400552502855590527876937384707229235098384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 13:26:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 13:26:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'offenda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 762791892686678630477044200978996936007218508385046422197824398800977308896560004824715812545686899900697658583552039436746128891302158823556707641169993007370220577695201453989080736196164328416417541666260615631273201381859976682849039971843258041710284924365224090710932404411422370828529254084178318935315217501785684466496934077651532962986653208425748837313096348306841742679421621908365108210826738035369803355417837460272274187623412250000286754685848087703199659809832485713873990014677093789352536680629668420313393701201271468388991937220632954333699587799920826655508076433090431826788327319133845756620849193739565038799981945483385696377052379959030109597546345454846330132240506379077716386791691700413345865109731317359888776888676117880922125475720272303782201035177582179308190487216527321005421652648365275333999795076360166968847684097306621407287478581464998859585112864184338454963518298337223699885778754755236352372767933184788259514781146745860474333535602588114134212721341855937200980333454455400449996059026871368924324969758876926982462129576294444555171081431638992992543858792409497854775424042099365252142791426252946789662683806598333347902680418353913520794801272467937649943248596017578442643916937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae8cf5d626ae4c2cf9c1f284769b6a1cb58b8e29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1696 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.11anime.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1hgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.20sogirl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aliexpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ascentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casero69.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chasea1.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.choiceadvantsge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chorac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chuyennhadat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleansextube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coblix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desirulez.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donmovil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecologicallyproduced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairwindgroup.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femdomvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filgentgenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flaviogbainvestimentos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaminformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gitllab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greytrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htfashion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imgwet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imsatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinogidrogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ktownautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lennonnoah.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediadisk6.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mekimeki.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microsofhup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgageflex.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgagerescue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypervyfamily.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partesdeautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payxhex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reappraisers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risveglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sekisuihouse.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thinxbig.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tilebrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unarcrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vansetistudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.w5m.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wunderwheel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ww5n.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfinitystreamapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '11anime.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1hgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20sogirl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliexpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casero69.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chasea1.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choiceadvantsge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chorac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuyennhadat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleansextube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coblix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desirulez.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donmovil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecologicallyproduced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairwindgroup.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femdomvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filgentgenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaviogbainvestimentos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaminformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitllab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greytrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htfashion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgwet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imsatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinogidrogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktownautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lennonnoah.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadisk6.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mekimeki.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsofhup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgageflex.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagerescue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypervyfamily.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partesdeautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payxhex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reappraisers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risveglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sekisuihouse.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinxbig.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilebrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unarcrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vansetistudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w5m.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wunderwheel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww5n.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfinitystreamapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a993c6ae60000040300473045022100f9806b4813754161fe8238242455136b13f41235bbeb426a469fc29d4b8d9db40220373584057f2c0eb8f916ee95208599c26ea05bdc220d8c3e521ac047af69dd870075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a993c6afe000004030046304402204f1fb43112a366f9d679ba68d2b149c8fc7a443d932309c69c14505642c2da7a022001a842181265cd5873b1b1aeeaf6d28ed6612393d6f9e0e319346f20566e37c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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