kraines.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ed:d5:d1:fe:6c:a5:33:14:11:06:c9:56:c2:cd:99:12:55 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kraines.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ed:d5:d1:fe:6c:a5:33:14:11:06:c9:56:c2:cd:99:12:55
Serial Number (int): 429380280600788830942881825498239493280341
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1d:93:88:d8:7b:a8:41:1d:17:41:35:61:1c:d2:9e:ec:3a:3c:13:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:88:91:fa:cc:e8:2f:50:c1:14:b7:61:df:7e:8d:45:9a:3c:05:60
Fingerprint (sha256): f4:66:3b:c6:fa:01:68:7f:41:a5:49:63:3a:9b:73:39:51:1b:0c:75:d6:f7:98:ee:a0:84:a9:b9:07:b6:7d:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kraines.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kraines.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.50670.de
*.701cinemas.com
*.akera.com
*.bombasi.com
*.brokedamouthgrindzkailuakona.com
*.bumeng.com
*.buzzfund.com
*.camarote.com
*.carepicha.com
*.charvoz.com
*.claitor.com
*.combisteamer.com
*.deepl.cm
*.disautos.com
*.eastwestmovers.com
*.elizabethsitalianandpizza.com
*.esteelaudercareers.com
*.genedeer.com
*.heiyingku.com
*.hyperoptic.co
*.informaticamedica.com
*.isaida.com
*.jerrymcnerney.com
*.kirara.com
*.kismayo.com
*.kolbie.com
*.korupce.com
*.kosele.com
*.kraines.com
*.loscana.com
*.mahl.com
*.metanoid.com
*.myhairgrow.com
*.myshermanoaks.com
*.phoenixjazz.com
*.refrigerantes.com
*.ritasbestdesigns.com
*.siaraclub.com
*.sodor-island.net
*.sunbunny.com
*.sweetfix.com
*.tamisha.com
*.televiziune.com
*.uncareer.com
*.universvirtuels.com
*.vibratorybowl.com
*.xn--beg-7la.com
*.xn--sov.com
*.yawat.com
*.zhongguomen.com
50670.de
701cinemas.com
akera.com
bombasi.com
brokedamouthgrindzkailuakona.com
bumeng.com
buzzfund.com
camarote.com
carepicha.com
charvoz.com
claitor.com
combisteamer.com
deepl.cm
disautos.com
eastwestmovers.com
elizabethsitalianandpizza.com
esteelaudercareers.com
genedeer.com
heiyingku.com
hyperoptic.co
informaticamedica.com
isaida.com
jerrymcnerney.com
kirara.com
kismayo.com
kolbie.com
korupce.com
kosele.com
kraines.com
loscana.com
mahl.com
metanoid.com
myhairgrow.com
myshermanoaks.com
phoenixjazz.com
refrigerantes.com
ritasbestdesigns.com
siaraclub.com
sodor-island.net
sunbunny.com
sweetfix.com
tamisha.com
televiziune.com
uncareer.com
universvirtuels.com
vibratorybowl.com
xn--beg-7la.com
xn--sov.com
yawat.com
zhongguomen.com

Other certificates including the domain name kraines.com

(limited to 100 certificates)
kraines.com
kraines.com
kraines.com
kraines.com
filetes.com
kraines.com
kraines.com
cralis.com
kraines.com
anawebcam.com
kraines.com
fideliylife.com
kraines.com

Certificate

The complete raw certificate details for kraines.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429380280600788830942881825498239493280341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 22:31:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 22:31:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kraines.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747170544973903821793194648771143632580914809368090425276922643935883864918727254540370390457359613754947894687739265358016669529763415396463014962543782887321415899641057404424572032931054734716423146989083370587595003860794557048041399947963707168904623466294720546634605904254673399078369514890827842644298008270768409321240610840433658512291888764149051904540722307595373308017842836314620448616682356850192183362745776680436442287492413884416377546726159720040796970285494591008884993097348324076429813566784175165292012850593340198381611798434288855308400255753716216871289938088781803652815617856032548654655682842370202965718415952512861613548542989235834038084652370793613746154462142266097438712995476338571623139240665820793579050362417658373408828579331888936695277270540470550938974276321963121176306260698481180906924822272800386638505107018541657911021239562594369791741749059940117354151998882634193065664053964768284983159021860100273415070445326354228976342606784381743698666237431459531821472231206536397536649301949060581191185904097960297454066799389739483935498037219408507737522783969556819355106537518019587596570008685753249085525107719239782912701800687281085220272259331099738068124554354479026579516543107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d9388d87ba8411d174135611cd29eec3a3c1382
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1680 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.50670.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.701cinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bombasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brokedamouthgrindzkailuakona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bumeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camarote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carepicha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charvoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.combisteamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepl.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastwestmovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elizabethsitalianandpizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esteelaudercareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genedeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heiyingku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyperoptic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.informaticamedica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isaida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerrymcnerney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kismayo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kolbie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.korupce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kosele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kraines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loscana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metanoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhairgrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myshermanoaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phoenixjazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refrigerantes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ritasbestdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siaraclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sodor-island.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunbunny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetfix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamisha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.televiziune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uncareer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universvirtuels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vibratorybowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--beg-7la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yawat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhongguomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50670.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '701cinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bombasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokedamouthgrindzkailuakona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bumeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camarote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carepicha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charvoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'combisteamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepl.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastwestmovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elizabethsitalianandpizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esteelaudercareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genedeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heiyingku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyperoptic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informaticamedica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isaida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerrymcnerney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kismayo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolbie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korupce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loscana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metanoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhairgrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myshermanoaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixjazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refrigerantes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritasbestdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siaraclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodor-island.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunbunny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetfix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamisha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'televiziune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncareer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universvirtuels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vibratorybowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--beg-7la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yawat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhongguomen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa57bebcb000004030046304402202c2e10ca92c790ba9e6c51f90f2dbb37472410d4c723b377de0f536c472bbb0b022028d3cc5e228fcaa8fc8f396fa746ef9f2a9e498871044409c42da30c72a5ac590076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa57bebe10000040300473045022018f19093c9f9031fbcbd5170f819f7fda90d6801229b8890b622e45e03ff4156022100bf16c9d152641a59355a5ee18c4472f02fb6d0177864b01eeb96f6c245b4b9ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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