ricohusacsod.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3a:11:a3:77:26:b4:38:f0:36:86:63:4b:2b:b5:78:38:ec was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ricohusacsod.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:11:a3:77:26:b4:38:f0:36:86:63:4b:2b:b5:78:38:ec
Serial Number (int): 281096680713684644713568570474418832685292
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:5c:15:7f:69:f1:ce:29:71:bc:d1:cc:cf:27:d6:54:a5:cd:e6:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 73:91:be:dc:c5:4c:07:33:e7:ee:ee:8e:d3:04:a5:86:96:a5:70:cd
Fingerprint (sha256): f7:ba:60:8c:32:79:3a:6d:4c:14:19:f3:fc:64:d1:06:f0:25:7e:0c:9a:33:19:ed:93:b3:89:72:44:e6:af:ba

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ricohusacsod.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ricohusacsod.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4107777.com
*.allegroartist.com
*.anisiya.com
*.anoodlemagazine.com
*.bibliotecad.info
*.bitchosgirls.com
*.brightstar.com.au
*.buddy-quiz.me
*.bx-games.com
*.citycab.com.au
*.clubspin.com
*.copitalone.com
*.cricketwyreless.com
*.cuvana3.cc
*.drven.com.au
*.freeiphone13.com
*.funomation.com
*.gadgetsgreen.com
*.gehico.com
*.groometransportations.com
*.hurlk.me
*.industrialgroupco.com
*.janen.com
*.kh22.co
*.klogitech.com
*.klokan.com
*.makemegenuis.com
*.nostrpurple.net
*.p9rhub.com
*.papos.com
*.pinkzebrahome.co
*.policygenuius.com
*.porngameahub.com
*.pristan.com
*.pya.com.au
*.ricohusacsod.com
*.runwaydoll.org
*.saufi.com
*.sbicardlogin.com
*.shetek.com
*.socialops.com
*.spotpetinos.com
*.ssbicard.com
*.startpagedeutsch.com
*.startupfounders.com.au
*.wickedlyfastwifi.com
*.wowbogo.net
*.wowfun.com
*.z9om.com
4107777.com
allegroartist.com
anisiya.com
anoodlemagazine.com
bibliotecad.info
bitchosgirls.com
brightstar.com.au
buddy-quiz.me
bx-games.com
citycab.com.au
clubspin.com
copitalone.com
cricketwyreless.com
cuvana3.cc
drven.com.au
freeiphone13.com
funomation.com
gadgetsgreen.com
gehico.com
groometransportations.com
hurlk.me
industrialgroupco.com
janen.com
kh22.co
klogitech.com
klokan.com
makemegenuis.com
nostrpurple.net
p9rhub.com
papos.com
pinkzebrahome.co
policygenuius.com
porngameahub.com
pristan.com
pya.com.au
ricohusacsod.com
runwaydoll.org
saufi.com
sbicardlogin.com
shetek.com
socialops.com
spotpetinos.com
ssbicard.com
startpagedeutsch.com
startupfounders.com.au
wickedlyfastwifi.com
wowbogo.net
wowfun.com
z9om.com

Other certificates including the domain name ricohusacsod.com

(limited to 100 certificates)
ricohusacsod.com
ricohusacsod.com
ricohusacsod.com
ricohusacsod.com
ricohusacsod.com
ricohusacsod.com

Certificate

The complete raw certificate details for ricohusacsod.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281096680713684644713568570474418832685292
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 03:40:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 03:40:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ricohusacsod.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 662882510272687963657965512507755693245755679754900769615968679600505474988465863713124044581926465920560225577450020498109512163647997280435008332525849098654851201344332174013866105451825824831125435453227028142987876028467989695388331697767508831065597790228467976918660839421452802306070374715225128543593649695539812954261568837248794839417678467908335800204013292907428228984331544674847520654815118052765736961714717379396783957216833768214994732514723217721426655299722677113146482469294644033504251929994137794011766133597129345005245048416154968875129805771407493039201593010453647071481534696502943962706629556737967552277374269072480681783465179544596896824863840644774518498249639308970367275449500017017018534218848358628026021034360575920250405860253788508822304757936420315349055424656063172089322922896730981473399083260652662427496540319187685941104109967305196519822621130654283981519504174626879743995796146139966791078129860420431682900799951571486264232524699600770815094298442085264929377622487506804187977540498228696770069292076326249865499288688889689868029669513393577297703117847680125479368146970767209329192999915489289135494895751087796856413838562153628576624796467384773862000484283920229602699462257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a05c157f69f1ce2971bcd1cccf27d654a5cde6bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1654 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4107777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allegroartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anisiya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anoodlemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bibliotecad.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitchosgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brightstar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buddy-quiz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bx-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citycab.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubspin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copitalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cricketwyreless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuvana3.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drven.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeiphone13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funomation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadgetsgreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gehico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groometransportations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hurlk.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.industrialgroupco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kh22.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klogitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klokan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makemegenuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nostrpurple.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p9rhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinkzebrahome.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.policygenuius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porngameahub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pristan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pya.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ricohusacsod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runwaydoll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saufi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbicardlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shetek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotpetinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssbicard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startpagedeutsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startupfounders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wickedlyfastwifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wowbogo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wowfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z9om.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4107777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegroartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anisiya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anoodlemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotecad.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitchosgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightstar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddy-quiz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bx-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycab.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubspin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copitalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwyreless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuvana3.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drven.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeiphone13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funomation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadgetsgreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gehico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groometransportations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurlk.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrialgroupco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kh22.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klogitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klokan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makemegenuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nostrpurple.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p9rhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkzebrahome.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policygenuius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porngameahub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pristan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pya.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricohusacsod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runwaydoll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saufi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbicardlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shetek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotpetinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssbicard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startpagedeutsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startupfounders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wickedlyfastwifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowbogo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z9om.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b7495982300000403004730450221009974c8199b3536161d9007ca29bda37f09f5a83b7d687e664f6dde9339e7cb870220587a8f84f680819e36c82b4a7de9b3dbd3af5d77b6cdefe3955cca7260975f0c007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b749598280000040300463044022009f639e8eaa1a8e15e33c43e1b5f32f4aaf5eda3949648342e0f28a41b93c73302202a0afea2d4414ea0218da4b0b724c78c557e4092c8a547256b6e9d8a434d04c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b612e138846563837264c434b117ed06a748e2e83087b44acd4593520bd5ebdc4eeea86be947767c6a1b2c4a2f7790d294444634b0da79796e989415e162adf5446abf12eb9345bd86db6f453c7ff03a6566eb647ee2d3f7773e232a8142e04d8eb8f6a30c6c13316fb05fd1750f4cdbf73f4de5b031a20a2a842706ab6d3591d5c8dc466efecabcc9413a9568fceab4d8e1c6399c5ba8c968e6286913f006fec30dab44a30ed6189d64eaede1548c72a28e9e40493778dfc081ac26e8b46457478ecd99e3c0e1bc6a372646a47e78fd5bc940201651ac4d2e88ca5e967cf11972332129717dbdf4e7cddb4cef25a6bfbd5fc907fe2eae9326ff470278d93732