secure10.nexternal.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 1d:0a:95:6e:46:4c:e1:9b:39:ed:56:22:c9:ac:38:80 was issued on by Sectigo Limited.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure10.nexternal.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:0a:95:6e:46:4c:e1:9b:39:ed:56:22:c9:ac:38:80
Serial Number (int): 38602565662233623704128944001918974080
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 1b:4c:82:a7:23:a3:ea:7e:b9:a4:96:49:a6:3b:df:4b:cc:ba:4f:e8
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 21:b4:f1:e1:b6:84:84:90:4e:b2:55:dd:fe:10:15:c7:98:79:fa:fd
Fingerprint (sha256): 18:cb:67:a4:5a:b6:c1:74:0f:9e:d2:0f:4d:14:73:d5:41:2f:37:ac:4d:14:37:6d:8d:e8:c8:78:17:97:fa:76

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate secure10.nexternal.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure10.nexternal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure10.nexternal.com
b2b.greengrowthbrands.com
club.amourasf.com
onlinestore.mounteden.com
purchase.waitsmast.com
retail.fbforiginals.com
retail.shopfbf.com
sales.diamondcosmetics.com
shop.alaskasbestsalmonjerky.com
shop.barrelofmonks.com
shop.brillianize.com
shop.carruthcellars.com
shop.collegebuys.org
shop.ctwhomecollection.com
shop.denverbeerco.com
shop.deschutesbrewery.com
shop.dorothyscandies.com
shop.eyrievineyards.com
shop.framuswarwickusa.com
shop.highlandgourmet.com
shop.hosmerwinery.com
shop.intermatic.com
shop.jsisigns.com
shop.kingwholesale.com
shop.loucity.com
shop.lwc.wine
shop.melvillewinery.com
shop.nationalwomenshistoryalliance.org
shop.northpolecity.com
shop.paradisemeats.com
shop.parkavenuewines.com
shop.pecansonpeachtree.org
shop.pinehurstbrewing.com
shop.pisonifamilyvineyards.com
shop.preventionpartners.com
shop.reptileorders.com
shop.ribbonsunlimitedinc.com
shop.riverbench.com
shop.schizoidshop.com
shop.selbywinery.com
shop.speedyworm.com
shop.stjameswinery.com
shop.tootiepieco.com
shop.zinkewines.com
store.barleans.com
store.bluerockvineyard.com
store.boringhempco.com
store.busybunny.com
store.butchersupply.net
store.caffeladro.com
store.domaineanderson.com
store.doubleeaglewine.com
store.doubleshotcoffeespecialists.com
store.dreamlandcomics.com
store.dynarex.com
store.estheticprofessionals.com
store.figginswine.com
store.firstfairway.com
store.flagzone.com
store.hanzell.com
store.honeyham.com
store.houseofcaviarandfinefoods.com
store.kalyrawinery.com
store.katechengines.com
store.metermall.com
store.moffettvineyards.com
store.nealvineyards.com
store.nwzoo.com
store.piecemakers.com
store.pragerport.com
store.rolwheels.com
store.safetystep.net
store.sanfordguide.com
store.sixsigmaranch.com
store.specialyeargifts.com
store.spectrametals.com
store.toiloregon.com
store.townlinehatchery.com
store.truecommerce.com
store.unimaxshop.com
store.veganessentials.com
store.westcoastsunless.com
store.winner-intl.com
store.wssdecor.com
stores.acmefinewines.com
wholesale.petiq.com
wholesale.popchips.com
wine.lewiscellars.com
wine.viader.com
wineshop.brianbensoncellars.com
wineshop.grazianofamilyofwines.com
wineshop.hendrywines.com
wineshop.newclairvauxvineyard.com
www.txscientific.com

Other certificates including the domain name nexternal.com

(limited to 100 certificates)
secure16.nexternal.com
investecstatus.mambu.com
secure19.nexternal.com
secure14.nexternal.com
secure17.nexternal.com
secure1.nexternal.com
secure2.nexternal.com
secure1.nexternal.com
secure3.nexternal.com
secure10.nexternal.com
secure2.nexternal.com
design.nexternal.tcpsg.net
secure12.nexternal.com
basp.status.ato.gov.au
secure17.nexternal.com
basp.status.ato.gov.au
secure1.nexternal.com
design.nexternal.tcpsg.net
secure12.nexternal.com
secure3.nexternal.com
*.cachefly.net
secure2.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
basp.status.ato.gov.au
secure3.nexternal.com
basp.status.ato.gov.au
secure2.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
secure1.nexternal.com
*.cachefly.net
*.cachefly.net
secure11.nexternal.com
secure3.nexternal.com
investecstatus.mambu.com
secure10.nexternal.com
secure5.nexternal.com
secure14.nexternal.com
*.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
*.nexternal.com
secure2.nexternal.com
*.cachefly.net
secure3.nexternal.com
ecommerce-blog.nexternal.com
*.cachefly.net
secure4.nexternal.com
basp.status.ato.gov.au
banknorth.status.mambu.com
secure5.nexternal.com
ecommerce-blog.nexternal.com
secure16.nexternal.com
*.nexternal.com
investecstatus.mambu.com
secure1.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
secure2.nexternal.com
*.cachefly.net
secure19.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
secure18.nexternal.com
secure2.nexternal.com
ecommerce-blog.nexternal.com
*.nexternal.com
secure14.nexternal.com
*.cachefly.net
secure5.nexternal.com
secure12.nexternal.com
secure3.nexternal.com
*.cachefly.net
*.cachefly.net
secure17.nexternal.com
secure12.nexternal.com
secure5.nexternal.com
*.cachefly.net
ecommerce-blog.nexternal.com
basp.status.ato.gov.au
secure14.nexternal.com
basp.status.ato.gov.au
secure18.nexternal.com
secure10.nexternal.com
investecstatus.mambu.com
secure10.nexternal.com
secure1.nexternal.com
secure3.nexternal.com
secure16.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
*.cachefly.net
secure10.nexternal.com
*.cachefly.net
secure10.nexternal.com
secure3.nexternal.com
secure1.nexternal.com
*.cachefly.net
secure16.nexternal.com

Certificate

The complete raw certificate details for secure10.nexternal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoCWXwqCDwvJAsCsSKOJ
iY1CTJCKHMbXsvnZfV2/P9iSdBNVsSiKu14HTRGAjgaxOwrVM/hxJdvpN6R/ASdE
bHfwwaVSNCaAxwz2SPa6DO7y/NQfJaeOT+t5VpgM1OIvWyQH5ArdehHAnC3oc0gB
O4nmgGh0gmO2g48fKUs7feXLdZdBKOvqkQ81yLwLurDzC1fpAroPIt0Hld7PeBHr
TOVqL89GxnY8c36Z3gFKMPc5+sWOzOqcyMi3I9/P2Bzls6Wu714tlPkNy3DGXhb8
tSQyrowtZkmeJonS8YnW+W5s04JtHmOFCj2XBmocZuWRsjW0ra9YTbEAJ6Xi91fD
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38602565662233623704128944001918974080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure10.nexternal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23543733527845835485463069575930454287521957432499297912145629202482304808626015945485887940238795995765828717553550493337903421844068349896923115204814421452350571895579167567507253330236198280022606373418531204441372116091805479684050993769427362717708454533863425143999531646437899077324047654463229490674027496356685191267465440656126167182371005079416089293610231440506495133250149504983562128035014379133151350307367062746393794918711821742666296268616301642167677118584249527263917058922236531501727818145095845413265587470986249491000870470402020823748857305393821061916864896019581206939937768005259387978637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b4c82a723a3ea7eb9a49649a63bdf4bccba4fe8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017150d4dd34000004030046304402202ef9426c6ab93c27cde080dc8990d857f897bf6a62cde39dbb73b10b268481aa02206138bcc2b0aad2d13bedf13a55a014e81868d285fd08d57a483bc8eab1adeb14007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017150d4de430000040300483046022100b87a86e6e5a80f20cb756ca1b63f467582b977f18d978a52924acf3afc064004022100c7ba6f0f3a0b706321149117fecef314a4a254cbfaded773d14e7cafee05d27a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2331 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure10.nexternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.greengrowthbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.amourasf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinestore.mounteden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.waitsmast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.fbforiginals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.shopfbf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.diamondcosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.alaskasbestsalmonjerky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.barrelofmonks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.brillianize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.carruthcellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.collegebuys.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ctwhomecollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.denverbeerco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.deschutesbrewery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dorothyscandies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.eyrievineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.framuswarwickusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.highlandgourmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hosmerwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.intermatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jsisigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kingwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.loucity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lwc.wine'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.melvillewinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.nationalwomenshistoryalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.northpolecity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.paradisemeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.parkavenuewines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pecansonpeachtree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pinehurstbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pisonifamilyvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.preventionpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.reptileorders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ribbonsunlimitedinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.riverbench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.schizoidshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.selbywinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.speedyworm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.stjameswinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.tootiepieco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.zinkewines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.barleans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.bluerockvineyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.boringhempco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.busybunny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.butchersupply.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.caffeladro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.domaineanderson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.doubleeaglewine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.doubleshotcoffeespecialists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.dreamlandcomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.dynarex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.estheticprofessionals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.figginswine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.firstfairway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.flagzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.hanzell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.honeyham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.houseofcaviarandfinefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.kalyrawinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.katechengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.metermall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.moffettvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.nealvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.nwzoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.piecemakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.pragerport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.rolwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.safetystep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.sanfordguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.sixsigmaranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.specialyeargifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.spectrametals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.toiloregon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.townlinehatchery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.truecommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.unimaxshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.veganessentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.westcoastsunless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.winner-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.wssdecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.acmefinewines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale.petiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale.popchips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wine.lewiscellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wine.viader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.brianbensoncellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.grazianofamilyofwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.hendrywines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.newclairvauxvineyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.txscientific.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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