www.chineseafricandevelopmentfund.net

Issued by R3

About this certificate

This digital certificate with serial number 03:0d:0b:9c:9f:e6:36:b4:2d:78:18:f1:d1:15:ed:e0:b9:e6 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.chineseafricandevelopmentfund.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:0b:9c:9f:e6:36:b4:2d:78:18:f1:d1:15:ed:e0:b9:e6
Serial Number (int): 265775963314659039843403737825989657410022
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:0f:3b:7b:48:6e:88:eb:e7:6e:9a:e4:cd:8a:22:9b:78:6e:e7:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4b:85:80:c6:eb:77:b7:4b:6c:28:55:de:59:c4:d7:4d:4e:10:ed:ad
Fingerprint (sha256): 0c:f6:78:86:f5:71:80:0e:39:30:32:20:d0:45:69:23:ba:07:d7:17:cf:22:d4:c3:c6:21:7d:2f:1a:7b:ac:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.chineseafricandevelopmentfund.net

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.chineseafricandevelopmentfund.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dgardencenter.com
advancedenergyservice.com
africaarena.com
amsterdamservices.com
bahrainbroadband.com
bermudasharetrust.com
bioinformaticslab.net
boyaustralia.com
chicagoswing.net
chineseafricandevelopmentfund.net
digitalmetalxchange.org
digitaloilxchange.org
economistsfund.com
energyminister.com
exchangeutilities.com
flying.net
forgottentechnology.org
gazacafe.com
gcclease.net
gccuniversity.com
globalflowershop.com
healthycomputing.net
homeservicesworld.com
icelandnetwork.com
itsallaboutgiving.net
leedcounsel.com
marshallislandsoffice.com
masterofappliedfinance.com
newdelhifood.com
northkoreainc.com
orangecountycinema.com
pipelaying.net
showfinance.com
singaporepropertymanager.com
slumstudio.com
slumtalent.com
sudanjam.com
swedenadvertising.com
underwritinglondon.com
wnbroadcast.com
worldlitgation.com
www.268330.com
www.3dgardencenter.com
www.advancedenergyservice.com
www.africaarena.com
www.bahrainbroadband.com
www.belemartists.com
www.belinay.org
www.bioinformaticslab.net
www.cgirecruitment.com
www.chicagoswing.net
www.chineseafricandevelopmentfund.net
www.commercialhighcourt.com
www.dataexchangecenter.com
www.digitaldisplaymedia.com
www.digitalmetalxchange.org
www.digitaloilxchange.org
www.economistsfund.com
www.energyminister.com
www.exchangeutilities.com
www.flying.net
www.gccuniversity.com
www.globalflowershop.com
www.healthycomputing.net
www.icelandnetwork.com
www.industrialcoder.com
www.lawrencetrust.com
www.leedcounsel.com
www.marshallislandsoffice.com
www.masterofappliedfinance.com
www.monopolyrussia.com
www.netjobsworld.com
www.newdelhifood.com
www.offshoreprovide.com
www.orbitglobe.com
www.osakajam.com
www.outdoorowo.com
www.pipelaying.net
www.servicepublishing.com
www.shipsinformation.com
www.showfinance.com
www.slumstudio.com
www.sportathens.com
www.swedenadvertising.com
www.wideutility.com
www.worldlitgation.com

Other certificates including the domain name chineseafricandevelopmentfund.net

(limited to 100 certificates)
www.3dgardencenter.com
amsterdamservices.com
www.chineseafricandevelopmentfund.net
wnbroadcast.com
3dgardencenter.com
www.pipelaying.net
boyaustralia.com
www.economistsfund.com
bermudasharetrust.com
bioinformaticslab.net
3dgardencenter.com
www.3dgardencenter.com
menloparkrehab.com
www.africaarena.com
www.chicagoswing.net
slumtalent.com
bermudasharetrust.com
newonlinejob.com
www.indiacountryclub.com
www.orbitglobe.com
bermudasharetrust.com
www.marshallislandsoffice.com
www.leedcounsel.com
www.osakajam.com

Certificate

The complete raw certificate details for www.chineseafricandevelopmentfund.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31Od3ZbKpEgmepbSQAoX
xPOq2yf+NK0WMiBX6gZaeoxAllqTadVYu6x5ZT+YrAyLGlQNK5gwfMdXJv2Yhhla
+TWnf9/fymwPvn4yro9C/tzr+osvnfhn0XQmAYe088ziEdT2+tAyl7/+YXonwoSy
3NiDybUQGLQEg9eYZVxGWAqSh+XMY4hkhZXPsHHR4D7f1wXZfGXDF8xAbuSJpxtm
XH13Gi8Z6+qa8Utp6ZwsCMNaKm9jECDnoYLKwmnmbweizFVlR0dpd7YrFaCTjBNp
VBYqqd6KOWPUzYpBBcOb+gAg5VCrapLIu88P3eiR297nPd3XWwtas5I2UNaKXbE4
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265775963314659039843403737825989657410022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 11:33:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 11:33:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.chineseafricandevelopmentfund.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28192374920447147886278151210297947899293770648430709402546230761693898833220711760446059925994373030132627600947459630461432633977705538171729813247071577127622283226735290744256625289385719899016970069372229425181539549878479809049759301581376532600206280129278219823624937051381141069995315434088999681298933564715197887769837756488547192907559072233161963253670911500676517005509374874512140572191968851687267895926229868352997543192288901809786774746579237594230250208040982281695118251654834344231717092665284652133135602368805743449772553964355623686865800409113728052570988551672704159675342854380508618504281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d10f3b7b486e88ebe76e9ae4cd8a229b786ee75c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1952 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dgardencenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedenergyservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africaarena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsterdamservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bahrainbroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudasharetrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioinformaticslab.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boyaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagoswing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chineseafricandevelopmentfund.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalmetalxchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaloilxchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economistsfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energyminister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangeutilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flying.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forgottentechnology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcclease.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gccuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthycomputing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeservicesworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsallaboutgiving.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leedcounsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshallislandsoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterofappliedfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newdelhifood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northkoreainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangecountycinema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipelaying.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singaporepropertymanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slumstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slumtalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanjam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swedenadvertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underwritinglondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnbroadcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldlitgation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.268330.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dgardencenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advancedenergyservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africaarena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bahrainbroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belemartists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belinay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bioinformaticslab.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgirecruitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagoswing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chineseafricandevelopmentfund.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercialhighcourt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dataexchangecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitaldisplaymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalmetalxchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitaloilxchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economistsfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energyminister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exchangeutilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flying.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gccuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthycomputing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industrialcoder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawrencetrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leedcounsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marshallislandsoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterofappliedfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monopolyrussia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netjobsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newdelhifood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoreprovide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbitglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osakajam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outdoorowo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pipelaying.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicepublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipsinformation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.showfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slumstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportathens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swedenadvertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wideutility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldlitgation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e8a337730000004030047304502202fbcfdf24b733116b7a59a5d4f05f948f4c0281fe7713e95f43957621fe8e2a1022100e382f411e9376b3f30c30e2b2c88997fcae0b8b37e6b85ca188b0f0ece4c6191007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e8a3377950000040300473045022007068b08494e4d7c460fc437f4e0c5dd22bdf3e4a006fe8d561803cd3556ab95022100cef8f62f92748308fa0ffd1c078ec743642af02f6f722fdb1aa75ba3f0a826d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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