librti.ca

Issued by R11

About this certificate

This digital certificate with serial number 04:06:fc:8a:06:72:5d:a0:1a:87:17:dd:40:ce:df:90:af:93 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=librti.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:06:fc:8a:06:72:5d:a0:1a:87:17:dd:40:ce:df:90:af:93
Serial Number (int): 350826520051226337781314581310263761350547
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:6b:e4:79:50:fe:d5:41:93:3a:78:20:4c:93:c1:f8:b9:11:9c:1b
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 72:6e:5c:b0:a9:1d:56:9d:2f:d7:88:9f:a6:61:77:ce:b9:db:86:b6
Fingerprint (sha256): 14:0e:a6:14:67:a6:9a:47:d7:61:8c:74:e7:27:6e:04:fa:4d:f1:2f:8b:a1:65:0b:2a:11:37:9c:7f:cc:9c:15

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate librti.ca

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for librti.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aijoana.com
andyhoule.com
anythingvaluable.com
anytimeschool.org
arbitrageowl.com
arbitragerate.com
arbitrageurs.com
arizonaweddingplanning.com
asian8k.com
asiapokerstars.com
astrologyhoody.com
automatedonlineorders.com
avantha.in
aznet.com
badassautomechanic.com
baldwinhomebuyers.com
bestineverything.com
bhwiplaw.com
cannabiswoods.com
captivateinteractive.com
clintontruthbook.com
constructioncleanup.org
diamondlaser.com
dietmastermind.com
domainawesome.com
dragdigital.com
europathelastbattle.nl
fmcap.vc
food-not-medicine.com
fuckingstrangers.com
fuelarbitrage.com
ganchl.org
gigahands.com
gill-nets.com
globo.org
glucoseid.com
gokulanandadas.org
govrefund.com
greatloco.com
hemptohemp.com
homemagazine.in
hornexcerpts.com
iowalakes.com
keywestconchrepublic.com
kobway.com
krocka.com
labellerealty.com
lacieheart.com
leadingdiversity.com
letsgobuffaloco.com
lh-cc.com
librti.ca
markrigsby.com
mauitrophy.com
michaelvertz.com
minilaptopreviews.com
mitulpatelod.com
monetizationnation.com
mylibertyrv.com
newkentcounty.com
newtonbrothers.com
officetarget.com
ourattendant.com
paulbarrett.com
petsluk.com
profoundseo.com
pst-original.com
pureallulose.com
radioactive-financial.com
raouldns.com
resellrightslibrary.com
rev2x.com
runawaycafe.com
rxbbqsauce.com
rxbloodsugarindex.com
rxcandybar.com
sahomebuildersguide.com
saint-mary.com
saskatoons.com
scienceismarketing.com
sexstoriesaudio.com
showbuilders.com
slavcams.com
sling.bdsmsecurity.com
stpetewindowwashers.com
sublime-garden.com
textmessagingad.com
thepfs.com
turntableplanet.com
umiprecepts.org
unfedmonton.com
universalcorporation.com
usedcaseco.com
usedhardiggcase.com
viccherikoff.com
votre.org
wepdr.com
www.realhealthysyrup.com
zeroenergycapable.com

Other certificates including the domain name librti.ca

(limited to 100 certificates)
librti.ca
librti.ca
librti.ca
librti.ca
librti.ca
librti.ca
librti.ca
librti.ca

Certificate

The complete raw certificate details for librti.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8IRyKyBmuhIXItWyJAo
bTHu4cKba76OirbjJMpYeo6WEcj0gKuKB6uV5XE9rXRlH8JKKtu2lNI7PK34M+Lu
xV4VaDV8fY/fGXDlY92Idz56lEXh4lDovW8lreZ53kCGbIA0mz97KZCsveIKWsH/
Uy1ExdhMyT1G+HEosX0GeHj+DFHoOjw9EK99c0x6lKR7rVjHOinh+VRxRwF38Tk3
8hgiwlmLto5gBtMhpAFxsa7Z1Ke48B+OlDwch4MHI7QB1w6DMVVI0gQpSY6ZgM0Y
Yyx61y97ha8ifS/OTWIVxFIUJOqpL9vot2/qng+3wIbgf57P0Eb7vQKs6J2xd0g+
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350826520051226337781314581310263761350547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 08:08:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 08:08:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'librti.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25722075129682526406413713600361000302522029411235781389911001704068171739240205621424459635299563667181347914802228309506881538838883440132995950199602151055114728982669346427196519823262164502365518534225676965758673185875294528717454530216219666364800658620208125960354181868881194768015069695607514817889266189715194784503379194473148640055719007511578986269337248446904650506181742047678911845840738841571226071027438192688804594125279743597825893759996627837725582760334123390481947208056269334255355661980231946590643755468312110312185648141309527133222674265777505881196813541149794929119791517466553422986909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							656be47950fed541933a78204c93c1f8b9119c1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1822 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aijoana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andyhoule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anythingvaluable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragerate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arizonaweddingplanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asian8k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiapokerstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrologyhoody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automatedonlineorders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantha.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aznet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badassautomechanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinhomebuyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestineverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhwiplaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabiswoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captivateinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clintontruthbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constructioncleanup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondlaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dietmastermind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainawesome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europathelastbattle.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmcap.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food-not-medicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuckingstrangers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganchl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigahands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gill-nets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glucoseid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokulanandadas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govrefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemptohemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homemagazine.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hornexcerpts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowalakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywestconchrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kobway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krocka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labellerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacieheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadingdiversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsgobuffaloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lh-cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'librti.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markrigsby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauitrophy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelvertz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minilaptopreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitulpatelod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monetizationnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylibertyrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newkentcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtonbrothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officetarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourattendant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulbarrett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petsluk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profoundseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pst-original.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pureallulose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioactive-financial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raouldns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resellrightslibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rev2x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runawaycafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxbbqsauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxbloodsugarindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxcandybar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahomebuildersguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-mary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saskatoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scienceismarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexstoriesaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slavcams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sling.bdsmsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpetewindowwashers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sublime-garden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textmessagingad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turntableplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umiprecepts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfedmonton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedcaseco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedhardiggcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viccherikoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wepdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realhealthysyrup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeroenergycapable.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ff1f4bc330000040300483046022100c2d81becc32f88a4290d2c663969098cbaf2daae4f68fba97e0a2c467b9b6dd0022100ceb94e1d9bb375912d00b53dc4f082b580ddf28e3817c5fd9fb7de4da5bb3bf40076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ff1f4bc770000040300473045022100fb037b91eaed14f193e2a13b82553f8b83993206d386873bf4a6393f2ec11f0f0220793a3b27f33c1bd323193c76b82c728ffe48aa974822f7f7c26d0840e1ea17bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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