farmervillefirstassembly.org

Issued by R3

About this certificate

This digital certificate with serial number 03:17:42:22:1d:75:26:84:d1:c3:c1:c3:2a:90:94:b5:17:e9 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=farmervillefirstassembly.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:42:22:1d:75:26:84:d1:c3:c1:c3:2a:90:94:b5:17:e9
Serial Number (int): 269251258417748813750514777882159333316585
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:f3:2b:6c:96:2b:66:01:96:93:17:68:17:82:8f:ed:3b:fb:bc:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 39:c7:c4:83:d3:fd:07:9e:5c:52:ff:41:f7:6f:25:91:7d:dd:23:f8
Fingerprint (sha256): 0e:5d:c3:08:17:49:12:f3:cf:74:af:17:0d:23:d6:64:0c:11:9a:7f:8f:f0:48:c8:82:b7:08:79:ff:76:55:35

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate farmervillefirstassembly.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for farmervillefirstassembly.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.111slot.io
*.1stsouthwoldscoutgroup.org
*.allaboutknives.com.au
*.anrolls.com
*.apphome.info
*.asalwkorkom.com
*.aydinhukuk.org
*.beerbrewkits.com
*.binarycoder.org
*.biznavi.info
*.casitaecologicasierragorda.net
*.celebritynaked.net
*.cinimahdapkapp.com
*.colourstrendz.com
*.corpoanavy.com
*.daily-blessings.com
*.defiantrum.com
*.dogecoinfarm.info
*.dottogames.com
*.enchantlearning.com
*.exposingchristianity.org
*.farmervillefirstassembly.org
*.fayas.me
*.gastrobahia.com
*.gtcouncil.org
*.havehopeforthejourney.org
*.host-t.com
*.hydrogenwaterusa.com
*.integribrasil.com
*.jimengdaohang.pro
*.kingjamesvideoministries.org
*.kteea.org
*.littlefeathers.com.au
*.newadultpasswords.com
*.obsrva.org
*.online-kinohd.info
*.ozbekiston.info
*.petsbynumbers.co.nz
*.riverdesign.com.au
*.senseart.com.au
*.sisat.pk
*.ssaqualogging.com
*.svhcva.org
*.taoenchoice.com
*.tc168.me
*.themancollection.com.au
*.thesnappycamper.com.au
*.wade.net.au
*.wearjoie.co
*.westdominicachildrensfederation.org
111slot.io
1stsouthwoldscoutgroup.org
allaboutknives.com.au
anrolls.com
apphome.info
asalwkorkom.com
aydinhukuk.org
beerbrewkits.com
binarycoder.org
biznavi.info
casitaecologicasierragorda.net
celebritynaked.net
cinimahdapkapp.com
colourstrendz.com
corpoanavy.com
daily-blessings.com
defiantrum.com
dogecoinfarm.info
dottogames.com
enchantlearning.com
exposingchristianity.org
farmervillefirstassembly.org
fayas.me
gastrobahia.com
gtcouncil.org
havehopeforthejourney.org
host-t.com
hydrogenwaterusa.com
integribrasil.com
jimengdaohang.pro
kingjamesvideoministries.org
kteea.org
littlefeathers.com.au
newadultpasswords.com
obsrva.org
online-kinohd.info
ozbekiston.info
petsbynumbers.co.nz
riverdesign.com.au
senseart.com.au
sisat.pk
ssaqualogging.com
svhcva.org
taoenchoice.com
tc168.me
themancollection.com.au
thesnappycamper.com.au
wade.net.au
wearjoie.co
westdominicachildrensfederation.org

Other certificates including the domain name farmervillefirstassembly.org

(limited to 100 certificates)
farmervillefirstassembly.org
farmervillefirstassembly.org
chintaiseikatu.net
farmervillefirstassembly.org

Certificate

The complete raw certificate details for farmervillefirstassembly.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269251258417748813750514777882159333316585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 11:17:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 11:17:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'farmervillefirstassembly.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837057357974685985395561834794730689894678686490375979297016749621755735583932553711521931950270533005494079718075622589151438847731434298408555270964749070357854113239804457308296628524539855893255591580644902349071326431626753268569800820892523015617773504837428745366372685442083968444474232440956805803966878566056381637217291940774819256034804252770919964216956655237556254823938174600619714542587801637969524512150402766862139607472936575416968741477571100768495440794587073843302321041994002735818061380673901625123611636930744102851572624200616609011896374317110489735581194178622648060289888305174410597381003520638446280340195036204012864235338321852130983735410593997028088502126732768345493359066786271368434015352197373387375322107049399774878508022132631625501088005012263165459633359142334348959854589672437897323184898870652815079425404082765619184580637370735637504946852268246816184843359416621935974844011223188249814593908898808487491426454394657451016681134020425271077554454206508208213624572262501326344050973969545669462876646086871272068641672136830016905502621833545986038721162127584952244184737592406357453150591786125645726045602060380603003861299611011380698054360736462396135980973559292369008500659689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6cf32b6c962b66019693176817828fed3bfbbc6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1990 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.111slot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1stsouthwoldscoutgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allaboutknives.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anrolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apphome.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asalwkorkom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aydinhukuk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beerbrewkits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binarycoder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biznavi.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casitaecologicasierragorda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celebritynaked.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinimahdapkapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colourstrendz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corpoanavy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daily-blessings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.defiantrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogecoinfarm.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dottogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enchantlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exposingchristianity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmervillefirstassembly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fayas.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gastrobahia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havehopeforthejourney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.host-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hydrogenwaterusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integribrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jimengdaohang.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingjamesvideoministries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kteea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.littlefeathers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newadultpasswords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obsrva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.online-kinohd.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ozbekiston.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petsbynumbers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riverdesign.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senseart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sisat.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssaqualogging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svhcva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taoenchoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tc168.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themancollection.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesnappycamper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wade.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wearjoie.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westdominicachildrensfederation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '111slot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1stsouthwoldscoutgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allaboutknives.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anrolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apphome.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asalwkorkom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aydinhukuk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beerbrewkits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binarycoder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biznavi.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casitaecologicasierragorda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebritynaked.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinimahdapkapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colourstrendz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpoanavy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daily-blessings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defiantrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogecoinfarm.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dottogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enchantlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exposingchristianity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmervillefirstassembly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fayas.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastrobahia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havehopeforthejourney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrogenwaterusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integribrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jimengdaohang.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingjamesvideoministries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kteea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlefeathers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newadultpasswords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsrva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-kinohd.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozbekiston.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petsbynumbers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverdesign.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senseart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sisat.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssaqualogging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svhcva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taoenchoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tc168.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themancollection.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesnappycamper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wade.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearjoie.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westdominicachildrensfederation.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018af0522054000004030047304502210087c23e48c7b45fda01276a6f8185eb1fe8380c03cb012e829be63449127b88f202207bef353b5d4c70d931f24418c946aef35c6c86b20696745d19dfeb370816eb4c007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018af05220480000040300483046022100b4595e4829edd07f996bb7aae39db77aa6fce46286b3cd0f5d8d674a760466b4022100bdcec75ad2b5e48b4a1492d09f6025dcf0a74fcb9d6310750753035899972681
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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