bef5.net

Issued by R3

About this certificate

This digital certificate with serial number 04:71:9d:79:87:ff:50:a8:f6:dc:e8:47:7a:bb:85:dc:c3:9e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bef5.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:71:9d:79:87:ff:50:a8:f6:dc:e8:47:7a:bb:85:dc:c3:9e
Serial Number (int): 387110371010718588464259370694507063198622
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 87:60:df:8f:f8:81:75:e8:51:33:0e:4c:af:c0:f7:a5:1d:52:44:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:60:93:02:e4:3d:3a:a3:27:c2:91:9b:93:21:de:ee:7b:69:b2:70
Fingerprint (sha256): e6:f7:a1:5c:7e:01:7e:e8:9f:55:0a:19:63:d3:9b:c1:f8:c6:14:28:69:df:a6:f0:5b:54:23:f6:d0:46:50:2b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bef5.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bef5.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.99yao2048.net
*.allacalidad.net
*.allall100.net
*.allmoviesforme.net
*.anaclaudia.com
*.arabtld.com
*.arteurbana.com
*.bef5.net
*.bluesongs.com
*.bwjnhccy.shop
*.caixuangame.shop
*.clevelandymca.com
*.dotbulk.com
*.expometal.com
*.fileinoregon.com
*.fox11newsonline.com
*.freeprone.com
*.gpgoogle.com
*.heart.vegas
*.hestreameast.is
*.honeyhunterworld.net
*.imk-online.de
*.it-works.cc
*.jp-voyeur.com
*.lifeofnorway.net
*.lovecancun.com
*.lovesaudiarabia.com
*.luteranosmexicanos.net
*.mikoku.shop
*.mycapitalcard.com
*.neworder.shop
*.nitenmon.net
*.nordsrtomrack.com
*.okbg.net
*.pahlea.net
*.poop.tube
*.protegendolinks.net
*.rhmacys.com
*.royalcatibbean.com
*.shirly.shop
*.simplifieddomains.com
*.suphan.com
*.tametheark.com
*.testbin.net
*.theconstructionnetwork.com
*.uncledog.com
*.undescriptive.com
*.unel.shop
*.walgareens.com
*.xn--azi-lma.net
99yao2048.net
allacalidad.net
allall100.net
allmoviesforme.net
anaclaudia.com
arabtld.com
arteurbana.com
bef5.net
bluesongs.com
bwjnhccy.shop
caixuangame.shop
clevelandymca.com
dotbulk.com
expometal.com
fileinoregon.com
fox11newsonline.com
freeprone.com
gpgoogle.com
heart.vegas
hestreameast.is
honeyhunterworld.net
imk-online.de
it-works.cc
jp-voyeur.com
lifeofnorway.net
lovecancun.com
lovesaudiarabia.com
luteranosmexicanos.net
mikoku.shop
mycapitalcard.com
neworder.shop
nitenmon.net
nordsrtomrack.com
okbg.net
pahlea.net
poop.tube
protegendolinks.net
rhmacys.com
royalcatibbean.com
shirly.shop
simplifieddomains.com
suphan.com
tametheark.com
testbin.net
theconstructionnetwork.com
uncledog.com
undescriptive.com
unel.shop
walgareens.com
xn--azi-lma.net

Other certificates including the domain name bef5.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for bef5.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387110371010718588464259370694507063198622
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 04:45:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 04:45:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bef5.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 875441865520509003153034617555858215503160452638497355461596921679563407637576871577022005049224485322512437365505583648754056770563204492596476413373126632908185538906612438951827865865058303789549935237172067337711947489792393493322141915629658600969483423717366031629605888235480488478138551072065077452785265340768728847360134925346593638558860826668528187811412419373625578099456165264572783860752734936261260398871183144481028144615804992471201577185969064490381873593099874346516180640605915904338812785481043297761505443512861995894032078391584627305630283966739905381497814176569417120469126307612737949336561306559868152947267844038098105824184668520587275502116876984701868491631401222454370209140618093231697817200415095176207032048970402191742802805029185528585736798666281992649798824049020688704704271315101982338569552210360932371235604114981595968603036957531765369782786238260166519302596757527338700081210361818917526583254965209772694527989141392373395468195918811341005973921873899855294731793839078900988079050321563303358280123845431905371314768134026900130439090884208421732893676647235727826119001453249204653872687161680876839724570894181364605374602352930328059527767638014330416171893575043813298110873943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8760df8ff88175e851330e4cafc0f7a51d524445
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1720 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99yao2048.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allacalidad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allall100.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allmoviesforme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anaclaudia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arabtld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arteurbana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bef5.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluesongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bwjnhccy.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caixuangame.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clevelandymca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotbulk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expometal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fileinoregon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fox11newsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeprone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gpgoogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heart.vegas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hestreameast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honeyhunterworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imk-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.it-works.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jp-voyeur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeofnorway.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovecancun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovesaudiarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luteranosmexicanos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mikoku.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycapitalcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neworder.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nitenmon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordsrtomrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okbg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pahlea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poop.tube'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protegendolinks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhmacys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcatibbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirly.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplifieddomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suphan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tametheark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testbin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theconstructionnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uncledog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.undescriptive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unel.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walgareens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--azi-lma.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99yao2048.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allacalidad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allall100.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allmoviesforme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anaclaudia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabtld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arteurbana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bef5.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluesongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwjnhccy.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caixuangame.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevelandymca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotbulk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expometal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileinoregon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fox11newsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeprone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpgoogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heart.vegas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hestreameast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeyhunterworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imk-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-works.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp-voyeur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeofnorway.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovecancun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovesaudiarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luteranosmexicanos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikoku.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycapitalcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworder.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitenmon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordsrtomrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okbg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pahlea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poop.tube'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protegendolinks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhmacys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcatibbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirly.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplifieddomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suphan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tametheark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testbin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theconstructionnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncledog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undescriptive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unel.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walgareens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--azi-lma.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d5e0cca58000004030046304402200e2da4b7ee7797cd245ad26d0dcad95b42840ea7ec44da768a278d69b79eeef0022076a31a634542ae7d075518f8fb6dad160527ff8c8fa2a66352c703395edec42400770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d5e0ccad30000040300483046022100b9c08466fc88995864310c6301e149690510ce1ee2703e270fd46ec699d15f3b022100e5a418f6161323ffece00f4f18a975d75c36539f00ec2aa5d575b280e6873aa7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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