kagigi.com

Issued by R3

About this certificate

This digital certificate with serial number 03:66:b3:cf:5f:d0:36:36:a2:03:b0:ea:06:08:16:bc:39:89 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kagigi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:b3:cf:5f:d0:36:36:a2:03:b0:ea:06:08:16:bc:39:89
Serial Number (int): 296284667781236828251196538525731950180745
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:8b:d7:b8:3d:0f:32:7e:8c:78:b4:c5:5f:99:7c:d8:1f:a9:21:80
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9a:28:f9:fd:e3:12:65:35:aa:07:aa:01:7f:6b:c0:2c:71:8c:44:6b
Fingerprint (sha256): e9:dc:f5:41:7b:d4:77:ed:56:89:d0:7a:bd:74:e2:68:15:3d:9f:e7:55:64:e1:13:77:66:29:97:9b:1e:f8:28

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kagigi.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kagigi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aksarayolayhaber.com
*.awarded.au
*.cambay.au
*.carmelle.au
*.cecille.au
*.decorative.au
*.disneyp.com
*.duytan.au
*.egyybest.com
*.enphase.au
*.exogenous.de
*.fabguyz.com
*.gayporno.au
*.gc1.au
*.gezdurma.com
*.hpconnected.au
*.iteland.com
*.kagigi.com
*.landes.au
*.lisi-aerospace.us
*.ljbenvironmental.com
*.lookmax.org
*.marilyandsarah.org
*.mcleish.au
*.montbell.au
*.penndellpuzzles.com
*.performaxgolf.com
*.petsathome.au
*.pleunverhoofstad.com
*.projectgutenberg.org
*.proxysites.au
*.pycgou.com
*.railcam.org.uk
*.rankqu.com
*.resgatelivelo.us
*.rockrooster.au
*.royalmine.net
*.royalmotor.au
*.seashepherd.au
*.skank.au
*.sokankan5.cc
*.southwesterntrains.co.uk
*.startupbootcamp.au
*.truenas.au
*.vandana.au
*.waterfordatbluelagoon.com
*.wilbert.shop
*.windowsazure.au
*.wowtrader.org.uk
aksarayolayhaber.com
awarded.au
cambay.au
carmelle.au
cecille.au
decorative.au
disneyp.com
duytan.au
egyybest.com
enphase.au
exogenous.de
fabguyz.com
gayporno.au
gc1.au
gezdurma.com
hpconnected.au
iteland.com
kagigi.com
landes.au
lisi-aerospace.us
ljbenvironmental.com
lookmax.org
marilyandsarah.org
mcleish.au
montbell.au
penndellpuzzles.com
performaxgolf.com
petsathome.au
pleunverhoofstad.com
projectgutenberg.org
proxysites.au
pycgou.com
railcam.org.uk
rankqu.com
resgatelivelo.us
rockrooster.au
royalmine.net
royalmotor.au
seashepherd.au
skank.au
sokankan5.cc
southwesterntrains.co.uk
startupbootcamp.au
truenas.au
vandana.au
waterfordatbluelagoon.com
wilbert.shop
windowsazure.au
wowtrader.org.uk

Other certificates including the domain name kagigi.com

(limited to 100 certificates)
kagigi.com
penndellpuzzles.com
penndellpuzzles.com
kagigi.com
www-braunlage.de
kagigi.com

Certificate

The complete raw certificate details for kagigi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296284667781236828251196538525731950180745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 22:59:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 22:59:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kagigi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767752008051896329689747921764438010498744148471589498925925893285808790204928612525193440611556735318984408186623304317477916183301208425746222813580451214609527098280000932743833019126159289790332865636822234080272580058550111487925501205701795948222631266396807555628433743425001376607957367169374011024791405661474359550501116860226023754411989185108395799968813347043789236752358284707124716788802913781691894871266195219337200486675357095435286689443520240994034109569137934011859788140154652296318629573982488460069353746231071745789040955298851275007776281119188932266477257392685949529502076727892665742090684765952005340466390188209530346283428836747296833200217029704380889338828757446049426190500970626968718790529863657770802337670788318613265016748173823168188448525426012853186924552252726091456323031499410296329681127744589467182167730219572768593919035128661350119185208226219557624782128245558274157867207766529974778790022089843486558979323723043866002673226175125287325690790984570482959381923289669019107601788727839422151681246700013885703978044377842110113882671494253742568591680947694733755854667295481952404780295629712805961545633643542657640956867604800063745001603028143654876914272907400577338929894503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e8bd7b83d0f327e8c78b4c55f997cd81fa92180
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aksarayolayhaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awarded.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cambay.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carmelle.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cecille.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decorative.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disneyp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duytan.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egyybest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enphase.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exogenous.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabguyz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gayporno.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gc1.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gezdurma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpconnected.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iteland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kagigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landes.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lisi-aerospace.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ljbenvironmental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lookmax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marilyandsarah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcleish.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montbell.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penndellpuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.performaxgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petsathome.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pleunverhoofstad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectgutenberg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proxysites.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pycgou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.railcam.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rankqu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resgatelivelo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockrooster.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalmine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalmotor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seashepherd.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skank.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sokankan5.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southwesterntrains.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startupbootcamp.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truenas.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vandana.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterfordatbluelagoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wilbert.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windowsazure.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wowtrader.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aksarayolayhaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awarded.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambay.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmelle.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecille.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decorative.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disneyp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duytan.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egyybest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enphase.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exogenous.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabguyz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayporno.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gc1.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gezdurma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpconnected.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iteland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kagigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landes.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisi-aerospace.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ljbenvironmental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lookmax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marilyandsarah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcleish.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montbell.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penndellpuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performaxgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petsathome.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleunverhoofstad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectgutenberg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxysites.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pycgou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'railcam.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rankqu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resgatelivelo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockrooster.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalmine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalmotor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seashepherd.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skank.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sokankan5.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwesterntrains.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startupbootcamp.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truenas.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vandana.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfordatbluelagoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilbert.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowsazure.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowtrader.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d671d5c9f0000040300463044022054c75e5d634ecbd27e78dc240922c0e9b8426293c4893965a06ce49458aab171022060784ace69ab09b2f6de7935203dccba2f75635c0cda0bc20ae302c24e79d311007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d671d5cdf0000040300463044022060816a1aa688fb01e2d222259a5f6d18723163fd3cb7a0aeb0cf3ba5f1f48daa02202cf18febf79c84e4c560525a9c0fb815e11a2bf6ed468c9c526c15bb60553815
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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