sagyn.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:07:af:c1:5b:7c:3f:29:bb:47:69:ca:14:b0:c8:7f:8e:92 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sagyn.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:07:af:c1:5b:7c:3f:29:bb:47:69:ca:14:b0:c8:7f:8e:92
Serial Number (int): 351064739163586727420277702317344588533394
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fb:f9:b7:18:b2:f9:d1:8c:74:d1:5f:d2:bd:ed:4b:3f:8a:dc:d0:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:f3:8f:03:6f:36:10:fc:36:5c:b5:fc:3e:64:cb:ce:78:e9:70:6f
Fingerprint (sha256): 00:37:cb:65:15:08:31:79:6a:b0:94:df:59:c2:66:18:9d:1d:44:fa:76:71:0f:bf:8f:15:ae:34:13:19:99:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sagyn.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sagyn.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4uinc.com
abermobile.com
bch-debit-card.com
bitxchange.org
bookers.bid
booktheorytesttoday.cc
callertunes.co.za
carpetcleanerservice.com
cartuccia.com
casinoonlinespielen.com.de
coinunboxed.com
coveainsurace.co.uk
cryptomatic.org
cybergenocide.com
dentistbrownsville.com
dotbit.org
doubleitup.org
enriquebreccia.com
exum.org
fricska.com
gigawebs.me
illuminatedvoices.org
imagesondemand.com
intellectual.space
kvetchtube.com
leed.consulting
medjugorje.bible
nederlandselicentie.com
pay-per-headline.com
philobe.com
polychan.world
prographics.org
purposefulinteractions.org
rackmountframe.com
rassenkrieg.org
sagyn.org
salvagetrade.com
seereisen.com.de
slash420.com
sloppyfirststhemovie.com
solar-guard.com
stemcellsoakland.com
stemcellstallahassee.com
supportcornelltech.org
taxdeferredexchange.com
testosterone24.com
twlv888.com
wallet.school
webnettime.com
www.4uinc.com
www.abermobile.com
www.bch-debit-card.com
www.bitxchange.org
www.bookers.bid
www.booktheorytesttoday.cc
www.callertunes.co.za
www.carpetcleanerservice.com
www.cartuccia.com
www.casinoonlinespielen.com.de
www.coinunboxed.com
www.coveainsurace.co.uk
www.cryptomatic.org
www.cybergenocide.com
www.dentistbrownsville.com
www.dotbit.org
www.doubleitup.org
www.enriquebreccia.com
www.exum.org
www.fricska.com
www.gigawebs.me
www.illuminatedvoices.org
www.imagesondemand.com
www.intellectual.space
www.kvetchtube.com
www.leed.consulting
www.medjugorje.bible
www.nederlandselicentie.com
www.pay-per-headline.com
www.philobe.com
www.polychan.world
www.prographics.org
www.purposefulinteractions.org
www.rackmountframe.com
www.rassenkrieg.org
www.sagyn.org
www.salvagetrade.com
www.seereisen.com.de
www.slash420.com
www.sloppyfirststhemovie.com
www.solar-guard.com
www.stemcellsoakland.com
www.stemcellstallahassee.com
www.supportcornelltech.org
www.taxdeferredexchange.com
www.testosterone24.com
www.twlv888.com
www.wallet.school
www.webnettime.com
www.xn--eczac-r4a.com
xn--eczac-r4a.com

Other certificates including the domain name sagyn.org

(limited to 100 certificates)
sagyn.org
www.birminghamsportsmed.com
trump.tube
futureflight.co.za
organicmedicalmarijuana.website
aifortzl.nl
datazona.com
www.hijabs.org
yosle.com
streamnownext.com
gigawebs.me
x4-advanced.com
www.supportcornelltech.org
bedizzole.org
mosquitobiteprevention.org
www.electricalmusclestimulation.com
booktheorytesttoday.cc
privatemetrics.org
www.mietwageneuropa.com
www.hanamai.com
www.solarpoweredlamb.com
dietid.org
gigawebs.me
www.tortilleria.com

Certificate

The complete raw certificate details for sagyn.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ3O7yx2XmM479k3jFkc
TM4hPu5vNKdHleOc9PI5UXJsXaOOu0iFcL9bDBXEQLIWwH0zX5qkNR9CidGPGAqi
zMgIylGU0PXtHuwj/Bw5I55uYYt3XNCabfeTtmFwd99WewSWAQ/2hVWBnyj0fLGr
Kj9Rr9WxClk7jQlZR/zCAYnqYH0035pHW9aKRx5Jt/hl+Klh2POH+5q1LdVAzWft
DHO+vf7QsT02pGaarhtis3RZOhyahOWGa3fQLP/Uco70FzbM7t7XnDzbc8n/OkpE
aOuW6L5Y5DRX3nL5IvfFG4NBCF4y6kpxH9TqiuWdGpbQYbaNeLO/uN67o+K9wsI9
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351064739163586727420277702317344588533394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 19:34:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 19:34:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sagyn.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24315572744782033806139897570047442111814139380679003130794557281508449774701615220936005466000380496206186158816536353556963584471043811073956593250939355803326638497591716013438596318523766959843518119205732920542238070499732588876955941240921501459645912436256468204015902645163678872712783674483458297485670854936979213979799793585917433144153935815239252703199014900293399450608679961654623720532394030976760603575039174304882331113526224281461925924135191259983985995931468500781499721616815989712176627581885726014914988167889675538924856305951138213522098343378847352799701862525565433148369179459720268889361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbf9b718b2f9d18c74d15fd2bded4b3f8adcd0c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2056 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4uinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abermobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bch-debit-card.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitxchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookers.bid'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booktheorytesttoday.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callertunes.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpetcleanerservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartuccia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinoonlinespielen.com.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinunboxed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coveainsurace.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptomatic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybergenocide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistbrownsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotbit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doubleitup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enriquebreccia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fricska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigawebs.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illuminatedvoices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagesondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intellectual.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kvetchtube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leed.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medjugorje.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nederlandselicentie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay-per-headline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polychan.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prographics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purposefulinteractions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rackmountframe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rassenkrieg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salvagetrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seereisen.com.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slash420.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloppyfirststhemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solar-guard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellsoakland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellstallahassee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcornelltech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxdeferredexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testosterone24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twlv888.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallet.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webnettime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4uinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abermobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bch-debit-card.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitxchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookers.bid'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booktheorytesttoday.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callertunes.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carpetcleanerservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartuccia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinoonlinespielen.com.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coinunboxed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coveainsurace.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptomatic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybergenocide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentistbrownsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotbit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doubleitup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enriquebreccia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fricska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gigawebs.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.illuminatedvoices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imagesondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intellectual.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kvetchtube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leed.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medjugorje.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nederlandselicentie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pay-per-headline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.philobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polychan.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prographics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purposefulinteractions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rackmountframe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rassenkrieg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sagyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salvagetrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seereisen.com.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slash420.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sloppyfirststhemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solar-guard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellsoakland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellstallahassee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportcornelltech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taxdeferredexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testosterone24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twlv888.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallet.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webnettime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--eczac-r4a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--eczac-r4a.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001704fb5a2ba0000040300473045022100da9700ca13c482acfd9ac5436270950e7e959563d7e7130007aa5adb120610e102207339169aa856d49ed94e64d4c1e5fe4056c41bc8e78bbf2514420071b3983ae700750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704fb5a2c2000004030046304402205f7f46c75f78508142b371e29d0c1ede924264517792bb05814f86b5879e08ff022074a769060a57ab54e45971b1e1cfa20d5f2608a4c502ca62a2ab37df43f9a471
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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