secure19.nexternal.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 56:b4:0a:61:97:fd:c1:65:f6:c2:f8:70:5f:48:23:df was issued on by Sectigo Limited.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure19.nexternal.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 56:b4:0a:61:97:fd:c1:65:f6:c2:f8:70:5f:48:23:df
Serial Number (int): 115248431628305842456226881854809580511
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 54:7e:4c:b6:5d:7e:0a:42:35:4f:af:ee:62:ef:5f:b8:d5:01:57:28
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 1a:92:5f:6d:84:f9:b5:2f:91:e1:f5:22:87:b8:c8:7a:be:fb:23:1e
Fingerprint (sha256): 0f:4a:d7:c3:13:91:cb:ef:4c:fb:b4:9d:d3:47:9b:63:5f:61:15:92:af:3b:3a:39:b3:c0:d2:f2:b5:48:e9:2e

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate secure19.nexternal.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure19.nexternal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure19.nexternal.com
b2b.nacycles.com
buy.deconlabs.com
dealer.swisstrax.com
gifting.cliffamily.com
market.mixon.com
order.williamscomfortprod.com
order.winegalaxy.net
orderentry.ptsdiagnostics.com
orders.disposerxdirect.com
orders.fletchersmill.com
orders.klgcandies.com
orders.masterfitinc.com
orders.medsaveon.com
orders.streamlinedpackaging.com
orders.ukropshomestylefoods.com
portal.priefert.com
products.yourcleanroomsupplier.com
retailers.noodleandboo.com
shop.bedvoyage.com
shop.betsyann.com
shop.biosb.com
shop.boneyardbeer.com
shop.buttonwoodgrove.com
shop.bwssafetysupply.com
shop.cleanerlivingproducts.com
shop.davidbrucewinery.com
shop.demisproducts.com
shop.dermaceutic.com
shop.dutchhenry.com
shop.egcgraphite.com
shop.eurotechseating.com
shop.frogtown.com
shop.gaparmour.com
shop.generaltoolsusa.com
shop.goshthatsgood.com
shop.honeystinger.com
shop.jaxonkeys.com
shop.jeffrunquistwines.com
shop.konacoffeeandtea.com
shop.legendairymilk.com
shop.mazzocco.com
shop.pastureprimewagyu.com
shop.pennpowergroup.com
shop.petdreams.com
shop.pezziking.com
shop.reptind.com
shop.robertrenzonivineyards.com
shop.seasonalsc.com
shop.seattlewineoutlet.com
shop.stripersniper.com
shop.sunshinesupplycompany.com
shop.taylormadegolf.com
shop.techopticsinc.com
shop.truecommerce.com
shop.ventosavineyards.com
shop.wallowavalleycleaningproducts.com
shop.zivalife.com
store.1886malt.com
store.andrewwill.com
store.appliedequinepodiatry.org
store.biofilm.com
store.buechelstone.com
store.caviarlover.com
store.christiangiftsplace.com
store.chroniclewines.co
store.crumbcake.net
store.datacommelectronics.com
store.davethewinemerchant.com
store.enginepartscenter.com
store.envomask.com
store.fictionsbeauty.com
store.gspamericas.com
store.hensallco-op.ca
store.longevinex.com
store.mauiwine.com
store.moorecoffee.com
store.mvmsinc.com
store.newkentwinery.com
store.newwayherbs.com
store.obcwines.com
store.rgnywine.com
store.rstuartandco.com
store.speechrecsolutions.com
store.techlab.com
store.trurovineyardsofcapecod.com
store.umab.com
store.vacmotorsports.com
store.vita-d-chlor.com
store.wineryatbullrun.com
wholesale.buddybrew.com
wholesale.coppermooncoffee.com
wineshop.bromancellars.com
wineshop.harrisestatevineyards.com
wineshop.heritageschoolvineyards.com
winestore.llwine.com
www.healthnutalternatives.com
www.store.pronetcycling.com

Other certificates including the domain name nexternal.com

(limited to 100 certificates)
secure16.nexternal.com
investecstatus.mambu.com
secure19.nexternal.com
secure14.nexternal.com
secure17.nexternal.com
secure1.nexternal.com
secure2.nexternal.com
secure1.nexternal.com
secure3.nexternal.com
secure10.nexternal.com
secure2.nexternal.com
design.nexternal.tcpsg.net
secure12.nexternal.com
basp.status.ato.gov.au
secure17.nexternal.com
basp.status.ato.gov.au
secure1.nexternal.com
design.nexternal.tcpsg.net
secure12.nexternal.com
secure3.nexternal.com
*.cachefly.net
secure2.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
basp.status.ato.gov.au
secure3.nexternal.com
basp.status.ato.gov.au
secure2.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
secure1.nexternal.com
*.cachefly.net
*.cachefly.net
secure11.nexternal.com
secure3.nexternal.com
investecstatus.mambu.com
secure10.nexternal.com
secure5.nexternal.com
secure14.nexternal.com
*.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
*.nexternal.com
secure2.nexternal.com
*.cachefly.net
secure3.nexternal.com
ecommerce-blog.nexternal.com
*.cachefly.net
secure4.nexternal.com
basp.status.ato.gov.au
banknorth.status.mambu.com
secure5.nexternal.com
ecommerce-blog.nexternal.com
secure16.nexternal.com
*.nexternal.com
investecstatus.mambu.com
secure1.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
secure2.nexternal.com
*.cachefly.net
secure19.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
secure18.nexternal.com
secure2.nexternal.com
ecommerce-blog.nexternal.com
*.nexternal.com
secure14.nexternal.com
*.cachefly.net
secure5.nexternal.com
secure12.nexternal.com
secure3.nexternal.com
*.cachefly.net
*.cachefly.net
secure17.nexternal.com
secure12.nexternal.com
secure5.nexternal.com
*.cachefly.net
ecommerce-blog.nexternal.com
basp.status.ato.gov.au
secure14.nexternal.com
basp.status.ato.gov.au
secure18.nexternal.com
secure10.nexternal.com
investecstatus.mambu.com
secure10.nexternal.com
secure1.nexternal.com
secure3.nexternal.com
secure16.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
*.cachefly.net
secure10.nexternal.com
*.cachefly.net
secure10.nexternal.com
secure3.nexternal.com
secure1.nexternal.com
*.cachefly.net
secure16.nexternal.com

Certificate

The complete raw certificate details for secure19.nexternal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL3UB0rNVu6SpJP/BvPD
Pma5UnrcSIgLNpUsyhY9s6ML2U5+B70i2Levey7dO+acxF5N27stpkBugi1scnBG
ZxG5m0Y0aRScpXueik1hwWm9Uh3RHdiieA/+f+LWClwL9BBt3H7EgYGSROqW5aXN
/isduFz0EXhn6STWsB/okY24kYUEDpA4ROP/+MgA1vwhh9MTkGQN/PtQl4NMLdB8
sEoT6m1D/lUvQtKAtlm5vemz3taOhdMLvZVDkxyctufdBDG63RRqa9RR3DjOXIoN
eHdDRWFH/LnqFxwzPOTQQ8eD98+zm65zEh2PyQRB7N3ZMZU65OnzoqgCfEW+EDr7
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 115248431628305842456226881854809580511
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure19.nexternal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18776876927091640733711535995684128528876106953058665371841845939656876540413053765895973834068279108479332237447761485654345895124484016360241353682407224377402495747781819033012240783350877137538616245808625973937599287051243418208043414514419471733580973297227470857236304759884780682096468311780432251918112952697660421708529181009866927355901869017435995944648478739461652088982879888975569914558642189420190748217054585039243288189483326132298520542518655368323326280807103757501298335851366838701259812192415423534345313125396992778544834074493683134598764665816503562563085399667859317953653404074409071409951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							547e4cb65d7e0a42354fafee62ef5fb8d5015728
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2445 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure19.nexternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.nacycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.deconlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.swisstrax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifting.cliffamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'market.mixon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.williamscomfortprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.winegalaxy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderentry.ptsdiagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.disposerxdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.fletchersmill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.klgcandies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.masterfitinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.medsaveon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.streamlinedpackaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.ukropshomestylefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.priefert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'products.yourcleanroomsupplier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.noodleandboo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bedvoyage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.betsyann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.biosb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.boneyardbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.buttonwoodgrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bwssafetysupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cleanerlivingproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.davidbrucewinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.demisproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dermaceutic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dutchhenry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.egcgraphite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.eurotechseating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.frogtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gaparmour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.generaltoolsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goshthatsgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.honeystinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jaxonkeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jeffrunquistwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.konacoffeeandtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.legendairymilk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mazzocco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pastureprimewagyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pennpowergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.petdreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pezziking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.reptind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.robertrenzonivineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.seasonalsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.seattlewineoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.stripersniper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sunshinesupplycompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.taylormadegolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.techopticsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.truecommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ventosavineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wallowavalleycleaningproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.zivalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.1886malt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.andrewwill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.appliedequinepodiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.biofilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.buechelstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.caviarlover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.christiangiftsplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.chroniclewines.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.crumbcake.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.datacommelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.davethewinemerchant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.enginepartscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.envomask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.fictionsbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.gspamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.hensallco-op.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.longevinex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mauiwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.moorecoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mvmsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.newkentwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.newwayherbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.obcwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.rgnywine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.rstuartandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.speechrecsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.techlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.trurovineyardsofcapecod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.umab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.vacmotorsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.vita-d-chlor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.wineryatbullrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale.buddybrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale.coppermooncoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.bromancellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.harrisestatevineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.heritageschoolvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winestore.llwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthnutalternatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.store.pronetcycling.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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