vikacg.co

Issued by R3

About this certificate

This digital certificate with serial number 04:45:40:af:88:f4:ec:a0:d1:89:03:49:bf:83:cc:0f:4c:45 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vikacg.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:45:40:af:88:f4:ec:a0:d1:89:03:49:bf:83:cc:0f:4c:45
Serial Number (int): 372014609066078829406227970007058367859781
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e5:09:05:3d:d7:52:05:5c:f6:91:19:19:63:42:7b:cd:f9:13:4e:38
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:c7:d1:04:e6:05:d4:b9:eb:1a:2d:8b:20:ae:1f:6f:60:7d:08:96
Fingerprint (sha256): fa:2a:79:44:52:65:ee:33:2e:71:ff:91:c7:51:6e:c9:11:0e:ed:35:e7:92:94:42:a0:c5:e1:7d:c7:ad:7d:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate vikacg.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vikacg.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.akermehanik.pro
*.authenteo.com
*.babutsa.com
*.borack.com
*.broomhall.com
*.calicoast.com
*.cantalamessa.com
*.carrerride.com
*.castelvetrano.com
*.chisesi.com
*.ciudaddeportivakiwanis.org
*.dealerlessen.com
*.forumfreek.com
*.gelabert.com
*.govesiebold.com
*.hulong.com
*.iswss.co
*.joy09.net
*.kickass.la
*.kronshtadt.com
*.marymar.com
*.meditativerelaxation.com
*.metrorrhagia.com
*.nagih.net
*.nonprofitsearch.com
*.oberscheidstr.com
*.partnerwithindia.com
*.pasday.co
*.pictorem.co
*.placida.com
*.rblxcodes.co
*.rockbadn.com
*.sandmanrecords.com.au
*.sazain.com
*.shakarganj.com
*.shopngocrong.me
*.sipoftea.net
*.souqbox.co
*.srivideo.com
*.summit-hill.com
*.sunnyleony.com
*.tarkovgang.com
*.thefanoutlet.co
*.tmcnet.co
*.tockband.com
*.tswatch.club
*.vikacg.co
*.watal.com
*.xingsu.com
*.zlkd2.com
akermehanik.pro
authenteo.com
babutsa.com
borack.com
broomhall.com
calicoast.com
cantalamessa.com
carrerride.com
castelvetrano.com
chisesi.com
ciudaddeportivakiwanis.org
dealerlessen.com
forumfreek.com
gelabert.com
govesiebold.com
hulong.com
iswss.co
joy09.net
kickass.la
kronshtadt.com
marymar.com
meditativerelaxation.com
metrorrhagia.com
nagih.net
nonprofitsearch.com
oberscheidstr.com
partnerwithindia.com
pasday.co
pictorem.co
placida.com
rblxcodes.co
rockbadn.com
sandmanrecords.com.au
sazain.com
shakarganj.com
shopngocrong.me
sipoftea.net
souqbox.co
srivideo.com
summit-hill.com
sunnyleony.com
tarkovgang.com
thefanoutlet.co
tmcnet.co
tockband.com
tswatch.club
vikacg.co
watal.com
xingsu.com
zlkd2.com

Other certificates including the domain name vikacg.co

(limited to 100 certificates)
vikacg.co
vikacg.co
elanusa.com
vikacg.co
vikacg.co

Certificate

The complete raw certificate details for vikacg.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372014609066078829406227970007058367859781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 17:53:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 17:53:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vikacg.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 976583126363468178341609000074405263394308393002874997276098273163603759622906837805562232594936468319063856849713465798775962363144848753249279794722015312866457883357302773065006610216211693996698267604501587842847544568306361393544698275939489621960770229530312604239027851092960346232994468727929255643915726844363981756623704092641149413009348123564534066448866022451893743426791194434456874238655655468670835892738517237948659653106753378986930027131373301240759092848824614932304801760380469353149872334773836272050029126674225168954823824440511171744524927653667900331878459133178647860126931169017385064434326688543625780844895121125505522845343873109823923915134250392789477159366182955648965011416855129054748585729984730106969147221352872183405480549417114394816947773020784097729399472841013796244967785822817755282356755332565855337517132351415595885572946932051797433780072179264111760108144759469383534078710435302265478294550446402381402422673562290371120151585732195457256440884623959692894482788616135883616739500848940276050794179492891935660635798607026449196009049145456666564278716569064037735524521315707311591341049467344573164089661317466418150651972524162888800523615221842183223775135272426026422378745893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e509053dd752055cf691191963427bcdf9134e38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1624 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akermehanik.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.authenteo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babutsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.borack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broomhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calicoast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cantalamessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrerride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.castelvetrano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chisesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciudaddeportivakiwanis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealerlessen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forumfreek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gelabert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govesiebold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hulong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iswss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joy09.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kickass.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kronshtadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marymar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meditativerelaxation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrorrhagia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nagih.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nonprofitsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oberscheidstr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partnerwithindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasday.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pictorem.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.placida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rblxcodes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockbadn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandmanrecords.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sazain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shakarganj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopngocrong.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sipoftea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.souqbox.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srivideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.summit-hill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunnyleony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarkovgang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefanoutlet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmcnet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tockband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tswatch.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vikacg.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xingsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zlkd2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akermehanik.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authenteo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babutsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broomhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calicoast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantalamessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrerride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelvetrano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chisesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciudaddeportivakiwanis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealerlessen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forumfreek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelabert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govesiebold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hulong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iswss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joy09.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickass.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronshtadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marymar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meditativerelaxation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrorrhagia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagih.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprofitsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oberscheidstr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerwithindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasday.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictorem.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rblxcodes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockbadn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandmanrecords.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sazain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shakarganj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopngocrong.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipoftea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'souqbox.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srivideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit-hill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnyleony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarkovgang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefanoutlet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmcnet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tockband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tswatch.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vikacg.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xingsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zlkd2.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ae7707e070000040300483046022100c570112b3bd327655eee02e5551e5e6db82d656d3a3cfccbf8dcd6b3eba10d23022100a673aa146f1bea2f035198bbc4f428b5ad2d1ef42c54997a3b03a371cdf9bcbd007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae7707e7d0000040300473045022100c3fc2e9f445eaad017b4ab87d7b98cb8d67af96fe8a92ba56fbf79b0a048155402200aba6b6ec3f01b1476cf44def8273bb65ff5747fb6c2bb4115ec9a68214829b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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