www.commodityproducers.org

Issued by R3

About this certificate

This digital certificate with serial number 03:a6:1f:6b:9e:4b:60:c0:d6:32:65:25:a9:b3:19:82:2a:de was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.commodityproducers.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:1f:6b:9e:4b:60:c0:d6:32:65:25:a9:b3:19:82:2a:de
Serial Number (int): 317865495558382493745158174517776263293662
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:38:0e:5d:d5:31:82:15:f2:3d:61:b5:f3:85:7e:9a:c9:fb:5e:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 19:f1:7d:3c:7c:cc:77:9e:20:3a:05:15:9f:35:d9:6e:ac:09:ad:3f
Fingerprint (sha256): 07:7f:ab:d1:03:4f:c3:78:96:7b:a0:17:c6:da:b1:22:8e:76:ab:9d:ea:86:11:e4:00:fb:d2:ef:a7:3a:a8:c4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.commodityproducers.org

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.commodityproducers.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agedblackgarlic.org
atlantapalace.com
bangalorefinance.com
capitalestonia.com
commodityproducers.org
coping.org
demolitionvessel.org
difficile.org
dnja.com
ecobarge.org
energieab.com
energyproduction.xyz
exposcandinavia.com
freight38.com
governmentjakarta.com
halalcity.org
hullsurvey.org
jeddahfinance.com
libyaclinic.com
linendirectory.org
marinehullsurvey.org
marketingbusinessworld.com
mayottefinance.com
mymissamericanpie.org
mytopschool.com
napkins.org
oillondon.org
opensourcecable.org
phoenixsettlement.com
plutoniumfuel.com
postvienna.com
radiow.org
recallmydata.com
royalfamilyprivate.org
saintpetersburgfinance.com
saudif1.com
soccerworldcupfinal.com
spacet.org
spacev.org
students123.com
tekno.xyz
thaijoboffshore.com
thechroniclesofnarnia.org
verdi20.com
www.agedblackgarlic.org
www.atlantapalace.com
www.bangalorefinance.com
www.bernefinance.com
www.bogotaclinic.com
www.capitalalbania.com
www.chinaconstruction.xyz
www.commodityproducers.org
www.coping.org
www.ecobarge.org
www.energyproduction.xyz
www.europeoffshore.org
www.exposcandinavia.com
www.floridasettlement.com
www.freight38.com
www.globeargentina.com
www.governmentjakarta.com
www.guiaoffshore.com
www.hullsurvey.org
www.internlogistik.com
www.linendirectory.org
www.marinehullsurvey.org
www.marketingbusinessworld.com
www.materiale.org
www.mayottefinance.com
www.mymissamericanpie.org
www.napkins.org
www.oatmealmilk.com
www.oilguyana.org
www.radiow.org
www.recallmydata.com
www.royalfamilyprivate.org
www.saintpetersburgfinance.com
www.soccerworldcupfinal.com
www.spacet.org
www.spacev.org
www.students123.com
www.tekno.xyz
www.thechroniclesofnarnia.org
www.verdi20.com

Other certificates including the domain name commodityproducers.org

(limited to 100 certificates)
www.saintpetersburgfinance.com
healthcarepro.xyz
opensourcecable.org
www.healthcarepro.xyz
www.commodityproducers.org
www.online-tutor.xyz
www.sportssponsorship.xyz
feedcorp.xyz
www.earthobservation.xyz
generalcounsels.org
www.spacetrader.xyz
www.asteroidmetals.org
www.oatmealmilk.com
tekno.xyz
commodityproducers.org
www.africarap.xyz
jeddahfinance.com
moscowz.com
www.chinaconstruction.xyz
opensourcecable.org
www.soccerworldcupfinal.com
saintpetersburgfinance.com
www.spacetrader.xyz
www.marketingbusinessworld.com
moscowz.com
www.oatmealmilk.com
oillondon.org
www.bangalorefinance.com
africarap.xyz
saintpetersburgfinance.com
governmentjakarta.com
tekno.xyz
www.weathermap.xyz
switzerlandrecruiting.com
saintpetersburgfinance.com
www.electricalengineer.xyz
opensourcecable.org
atlantapalace.com
www.bangalorefinance.com
www.energyproduction.xyz
www.spacetrader.xyz
www.exposcandinavia.com
www.spacetrader.xyz
africarap.xyz
offshoreradio.xyz
opensourcecable.org
www.chinaconstruction.xyz
commercialtraders.org
www.bogotaclinic.com
africarap.xyz
www.dataintrusion.xyz
students123.com
www.spacetrader.xyz
www.oatmealmilk.com
www.earthobservation.xyz
www.sportssponsorship.xyz
powerconsumption.xyz
www.spacet.org
governmentjakarta.com
rideitlikeitsstolen.xyz
www.spacet.org
atlantapalace.com
www.sunwater.xyz

Certificate

The complete raw certificate details for www.commodityproducers.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5XPnYX2hIkcPLlcrLK6
DoEp65sdRQFwpMs0QnC2Fg5hus+UnSFk2ITWuQUD4aXvS8qqFJOzyAOWjJ5Ke11t
xv2VIW3JY0ANEpmqffZp7P55eNC+WL9DhTvdtc+wkunpWbw2qoRzOEyJ4sN7rpWB
kC7jWW/kVES80sfl13QBDw645VMUiDfnmfYHDd55PvFDtydDr0vKnEsxoqzDFcgI
yq4uj2Iqil9uwconvPV2Sj9AZ9gIiW24kIGWmZoR9jhwVN++gz9+467rfAOruJw7
EFFmbJyTELAGRbQDbrnrCQOu1PfP5bwOKIH+6Lt/dnOiZGdKs88lNNK0jdxFRuFN
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317865495558382493745158174517776263293662
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 11:32:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 11:32:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.commodityproducers.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26205203684117080437761442300435101854941736008312698642456080703662433926902190685382220050248769864804933779456052363185931126435081514654689416143347540574905023782400441009321133917853177831685619149352020942346381493771117653087963672994566074996204089577733842752818272307130984181752205959385607276093453030061547982956464408070940614717418731597191807774003192115594527331385041403861086458456249086709121575204172053418396344577230003036478374543678369405142362856980112031561309296207877611671090142383074431428210707430537389313920428474976066069951137194982701299984405374951826664206029214107573996834051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37380e5dd5318215f23d61b5f3857e9ac9fb5eeb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1737 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agedblackgarlic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantapalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bangalorefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalestonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityproducers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coping.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demolitionvessel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'difficile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecobarge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energieab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energyproduction.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exposcandinavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freight38.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governmentjakarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halalcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hullsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeddahfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libyaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linendirectory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinehullsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingbusinessworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayottefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymissamericanpie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytopschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napkins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oillondon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opensourcecable.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plutoniumfuel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postvienna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recallmydata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalfamilyprivate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpetersburgfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saudif1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccerworldcupfinal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'students123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekno.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaijoboffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thechroniclesofnarnia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdi20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agedblackgarlic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantapalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bangalorefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bernefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bogotaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalalbania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaconstruction.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commodityproducers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coping.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecobarge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energyproduction.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europeoffshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exposcandinavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.floridasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freight38.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globeargentina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governmentjakarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guiaoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hullsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internlogistik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linendirectory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marinehullsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketingbusinessworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.materiale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayottefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymissamericanpie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napkins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oatmealmilk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oilguyana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recallmydata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalfamilyprivate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpetersburgfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soccerworldcupfinal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.students123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekno.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thechroniclesofnarnia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verdi20.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d55353a1e0000040300473045022100ebfeb5178788508615dbeca54a15c360a9cf29a47e6002ea85228add288e7da502202e20b12df7c9b1eba2352270ee478f392ce47a49aabf9f904ebec4c65677bdfb007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d55353a180000040300473045022100f6a9a4eca26f93e26bab4dd5431d3533c4de4cf9b1638c959ed85a15b57176ec022060c8e2fdc240cebde4465f6ecf521427affa5c50f70d14684f864c73880d11fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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