magicvalleycoop.com

Issued by R3

About this certificate

This digital certificate with serial number 03:bc:33:ea:a1:7d:16:bb:4d:ff:46:d1:18:71:cd:76:86:40 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=magicvalleycoop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:33:ea:a1:7d:16:bb:4d:ff:46:d1:18:71:cd:76:86:40
Serial Number (int): 325378951677045600540046854789342273373760
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:a4:bf:dd:8c:2a:94:8c:94:78:5d:26:fa:4b:b5:94:70:11:09:a9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5b:8d:ee:78:a2:0c:f7:df:50:58:aa:ce:1a:83:c3:2d:01:f5:ad:a2
Fingerprint (sha256): f4:4c:98:2d:c7:15:2d:78:c3:0b:45:a6:c5:80:4c:c6:ee:18:1a:1c:73:6f:75:ed:c0:a2:16:5c:d7:99:47:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate magicvalleycoop.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magicvalleycoop.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.21989.org
*.247siam.com
*.actmarketing.com.au
*.avidol.us
*.babybasic.com
*.basketeuropa.com
*.bibleway.us
*.domaincountries.com
*.eunosupermercado.com
*.everythingenglish.co.uk
*.ezdra.us
*.filmy-smotret.online
*.fixtor.ch
*.flixter.ch
*.foxwoos.com
*.freefunda.xyz
*.giftcardsking.xyz
*.hjable.tv
*.hotelguides.us
*.hpsupport.us
*.icy-vains.com
*.iphonefamily.net
*.kiosvideo.com
*.lrfradio.com
*.magicvalleycoop.com
*.marnierfinance.com
*.mightybin.live
*.mobiletubesex.com
*.ndvidia.com
*.newbalanceoutlet.us
*.nigeronline.com
*.officebasics.com.au
*.plafolift.com
*.podnapsi.net
*.qickbook.com
*.scimitar.com.au
*.sharron.com.au
*.startrekman.us
*.systcms.me
*.taladvithidham.com
*.tjsautosalesonline.com
*.torrdroid.online
*.torrentov.xyz
*.trysheet.com
*.tulola.co
*.updateone.me
*.urdudvds.com
*.vlxxvietsub.tv
*.wwwnxnx.com
*.youjizzlive.co
21989.org
247siam.com
actmarketing.com.au
avidol.us
babybasic.com
basketeuropa.com
bibleway.us
domaincountries.com
eunosupermercado.com
everythingenglish.co.uk
ezdra.us
filmy-smotret.online
fixtor.ch
flixter.ch
foxwoos.com
freefunda.xyz
giftcardsking.xyz
hjable.tv
hotelguides.us
hpsupport.us
icy-vains.com
iphonefamily.net
kiosvideo.com
lrfradio.com
magicvalleycoop.com
marnierfinance.com
mightybin.live
mobiletubesex.com
ndvidia.com
newbalanceoutlet.us
nigeronline.com
officebasics.com.au
plafolift.com
podnapsi.net
qickbook.com
scimitar.com.au
sharron.com.au
startrekman.us
systcms.me
taladvithidham.com
tjsautosalesonline.com
torrdroid.online
torrentov.xyz
trysheet.com
tulola.co
updateone.me
urdudvds.com
vlxxvietsub.tv
wwwnxnx.com
youjizzlive.co

Other certificates including the domain name magicvalleycoop.com

(limited to 100 certificates)
dipconverter.cc
3153.com
*.actmarketing.com.au
cedargrovebaptistchurch.com
biooperation.com
magicvalleycoop.com
hotel-fiestareal.com
thestanleyhotel.com
thestanleyhotel.com
transinion.com
magicvalleycoop.com
thestanleyhotel.com
thestanleyhotel.com

Certificate

The complete raw certificate details for magicvalleycoop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325378951677045600540046854789342273373760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 04:03:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 04:03:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magicvalleycoop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798266242149971856198920748503078739570748969644003816206585651914802829635464305303136916637527546630602375550315631730509403262424548707564090037866065750040260543675274401165997275742221135943209698484181885076639443567310058047276024643547003706908550983031363066838950237999291855879072862147136597350155225603725332686138144866805826485246188261710276572375536393058165325678725882621623727836481996334914556451310012685783227060309742535411449630912385661280336266516728914504296620757897654316254329742980486643994500808600705789217580978890379046203282568966833882505888225137557758182112565208920560389318387651547016969357346075553974735400969612684004605783153027404519851323150865923856848430779252880678145951123910883545631829745337771579594681471397081120635471878269424818926630439863340229000799753524278058743880360117025936376663086238258748606856502138008527343879813029002280161074956618991562675804625688646299802458303605330103124767353986888941957240709882424877850342513820023143194583677801536987455274523418176064481398312969039176908428878234603956718743234337774718936077711991669239631321805275342766374255737721846807272115517895775629695991050894437649830210773756098872228766918052909293338689179669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5a4bfdd8c2a948c94785d26fa4bb594701109a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1708 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.21989.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.247siam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actmarketing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avidol.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babybasic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basketeuropa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bibleway.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domaincountries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eunosupermercado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everythingenglish.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezdra.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmy-smotret.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixtor.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flixter.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxwoos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freefunda.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giftcardsking.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hjable.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelguides.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpsupport.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icy-vains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iphonefamily.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiosvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lrfradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magicvalleycoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marnierfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mightybin.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobiletubesex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ndvidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newbalanceoutlet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nigeronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officebasics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plafolift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.podnapsi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qickbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scimitar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharron.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startrekman.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.systcms.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taladvithidham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tjsautosalesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrdroid.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentov.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trysheet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tulola.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.updateone.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urdudvds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vlxxvietsub.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwnxnx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youjizzlive.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '21989.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '247siam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actmarketing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidol.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babybasic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketeuropa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibleway.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domaincountries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eunosupermercado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everythingenglish.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezdra.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmy-smotret.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixtor.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flixter.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxwoos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freefunda.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcardsking.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjable.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelguides.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpsupport.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icy-vains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphonefamily.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrfradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicvalleycoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marnierfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mightybin.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiletubesex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndvidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbalanceoutlet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officebasics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plafolift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podnapsi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qickbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scimitar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharron.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startrekman.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systcms.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taladvithidham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjsautosalesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrdroid.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentov.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trysheet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulola.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updateone.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urdudvds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlxxvietsub.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwnxnx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youjizzlive.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac591ee8b000004030046304402203f84fafb50823bf115e6f477925c4cab70671df59bf9d794c70be54b703ca2d10220059f1f2d06845474babc160ff2950cb852181bac30bb674f16f6fc5343a0df08007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ac591ef540000040300483046022100c333e438bc019612d09bbeaa2678913032d8cba94db45148e1d9dab51c6acbfb022100932dbc8f3c6e761b8e3aa652ab9a33057d9f07c12b00d847c31dd7b78cbbc6db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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