dnamining.com

Issued by R3

About this certificate

This digital certificate with serial number 04:3f:f1:0b:23:eb:54:3a:e7:b0:0e:26:b7:1a:64:4b:2b:af was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dnamining.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3f:f1:0b:23:eb:54:3a:e7:b0:0e:26:b7:1a:64:4b:2b:af
Serial Number (int): 370207334633838740664459348625771419347887
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6a:b3:d2:8c:0a:77:05:1c:6b:02:26:18:9f:ae:6e:96:77:4f:ef:b7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:b9:64:8b:5e:73:52:74:d2:1c:8b:05:b2:d7:59:1c:10:ca:b4:64
Fingerprint (sha256): f5:3b:96:42:f8:fc:2d:14:9b:60:7e:21:ea:72:3b:4d:38:00:8c:9d:bf:ff:25:f5:b8:f1:cc:42:02:8e:14:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dnamining.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dnamining.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.62b70ac32d4614b.com
*.acj.com.pl
*.alanguedes.com
*.allokhaddar.com
*.americandebt.com
*.aokirin.me
*.associatedbank.co
*.betadirectories.com
*.briefauftrag.com
*.censoredbooru.org
*.cosmiccow.com
*.custom-motor.com
*.dalzell.net
*.dancyin.com
*.df1374.com
*.dnamining.com
*.downloadram.net
*.drawnmark.cn
*.eveliinalivin.com
*.familiandoandoviajando.com
*.filme-bune.info
*.florida-private-investigator-near-me.com
*.hastings.com.au
*.hayvaomua.com
*.httpvimeo.com
*.independentrealestateagents.com.au
*.kopkeluargakaribon.com
*.kuppipaal.com
*.malioficial.com
*.moonkissed.com
*.mortgagecomparisons.com.au
*.mrcnn.com
*.multimediape.com
*.myhomestoreshop.com
*.oacottawa.org
*.patriciarceasar.me
*.raquelvip.es
*.reviewmyservice.com.au
*.saint-michel.com
*.spiray.com
*.ssoap2day.org
*.stonehold.com
*.streaminghd-serie.com
*.teinipillut.com
*.toplogo.info
*.unlockingcms.com
*.victoryfinance.co
*.vilchez.com
*.voody.com
*.zeinh.com
62b70ac32d4614b.com
acj.com.pl
alanguedes.com
allokhaddar.com
americandebt.com
aokirin.me
associatedbank.co
betadirectories.com
briefauftrag.com
censoredbooru.org
cosmiccow.com
custom-motor.com
dalzell.net
dancyin.com
df1374.com
dnamining.com
downloadram.net
drawnmark.cn
eveliinalivin.com
familiandoandoviajando.com
filme-bune.info
florida-private-investigator-near-me.com
hastings.com.au
hayvaomua.com
httpvimeo.com
independentrealestateagents.com.au
kopkeluargakaribon.com
kuppipaal.com
malioficial.com
moonkissed.com
mortgagecomparisons.com.au
mrcnn.com
multimediape.com
myhomestoreshop.com
oacottawa.org
patriciarceasar.me
raquelvip.es
reviewmyservice.com.au
saint-michel.com
spiray.com
ssoap2day.org
stonehold.com
streaminghd-serie.com
teinipillut.com
toplogo.info
unlockingcms.com
victoryfinance.co
vilchez.com
voody.com
zeinh.com

Other certificates including the domain name dnamining.com

(limited to 100 certificates)
dnamining.com
dnamining.com
falconcorporateadvisory.com
medicaliot.com
unncommongoods.com
zakaa.com
controlmypc.com
dnamining.com
dnamining.com
amcommunications.com
dnamining.com
op012.com

Certificate

The complete raw certificate details for dnamining.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370207334633838740664459348625771419347887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 08:27:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 08:27:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dnamining.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749167208913194604737723346329172184153699782188565686441285778219840952630060558368117689606366848043519173218294734525320347448047318068460047731899405221974171320271145223372437060978539907624183826175734920572715665797785076036870854979122839546920748085644684250790760021054536310930532790899000250304976220950483118915719479264389832979170671347759559005316077916333791059152604785935597102526546300106793877946629132060443900314058327757427272054972776117750472907904797831692204501204308436629767451020553682936371000962746953448210054717867518270137199770126944077688022578884596171785238623087725385020518644319550508608565010136222122336992134870746989665092544127610780396823461025777344236803907129162495467130437631300865194715541687729683751218903829795260594024941948153641938155038716286616708629948381807016203062464363590161844762651386212310133731413153518065569821847104130041643287492522787891790646632856207222315724304820758839345469983622960573504163493500332286689336432285202068516255352873928169650686806881395337870781544876689635311476976139985040732849742787774855946090743937969433736842190164343823285671830696267343726178086703511431208224214750176784555614894210099011132793116232281192897637446121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ab3d28c0a77051c6b0226189fae6e96774fefb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1880 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.62b70ac32d4614b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acj.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alanguedes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allokhaddar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americandebt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aokirin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.associatedbank.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betadirectories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briefauftrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.censoredbooru.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmiccow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.custom-motor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dalzell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dancyin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.df1374.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnamining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downloadram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drawnmark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eveliinalivin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familiandoandoviajando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filme-bune.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.florida-private-investigator-near-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hastings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hayvaomua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.httpvimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independentrealestateagents.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kopkeluargakaribon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuppipaal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malioficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moonkissed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgagecomparisons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrcnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multimediape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhomestoreshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oacottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patriciarceasar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raquelvip.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reviewmyservice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saint-michel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssoap2day.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stonehold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streaminghd-serie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teinipillut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toplogo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unlockingcms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victoryfinance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vilchez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '62b70ac32d4614b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acj.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alanguedes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allokhaddar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americandebt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aokirin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associatedbank.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betadirectories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefauftrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'censoredbooru.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmiccow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custom-motor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalzell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancyin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'df1374.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnamining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drawnmark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eveliinalivin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familiandoandoviajando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filme-bune.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florida-private-investigator-near-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayvaomua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httpvimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independentrealestateagents.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kopkeluargakaribon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuppipaal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malioficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonkissed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagecomparisons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrcnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimediape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhomestoreshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriciarceasar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raquelvip.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviewmyservice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-michel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssoap2day.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonehold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streaminghd-serie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teinipillut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toplogo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlockingcms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoryfinance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vilchez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeinh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018caa99a8ec0000040300473045022002d5c7b4123b3d920ca0ce2b000814d3c61dad7ac57ca57a9b98dbe1fc1180cd022100da3b85206d634f8d91650e3b5a8663f1357142327d539c622efdde5e34fa8174007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018caa99a8f60000040300473045022100f2eeac654bb3c6ed0df7b9372b6eca2b8021f599b2de1c2b2e646596d91232fa02203770b1aaf165a2901fe10c10b840f3936f22dbc6beb054c291404964f85b776d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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