lists.galvanys.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b1:29:d1:13:8f:0a:53:92:61:08:05:90:4c:db:cd:10:97 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lists.galvanys.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b1:29:d1:13:8f:0a:53:92:61:08:05:90:4c:db:cd:10:97
Serial Number (int): 321622420674856068893770621482913562955927
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:f4:09:14:0d:4c:48:6a:14:15:ac:2f:ce:33:63:82:93:e7:52:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:eb:aa:00:30:93:50:1c:df:e7:6f:56:a5:71:c4:db:51:42:de:90
Fingerprint (sha256): 1b:57:e9:b7:4b:12:a3:98:3b:00:ac:1c:aa:98:3c:e0:24:1a:7d:da:63:4f:da:11:65:ae:6e:a7:6e:1c:23:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lists.galvanys.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.galvanys.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.galvanys.com
lists.ganhalev.org
lists.gatewaykeith.org
lists.geminiandscorpio.com
lists.gemologyproject.com
lists.genealogycenter.info
lists.genealogycenter.net
lists.genealogycenter.org
lists.georgiabikes.org
lists.gjsgjs.com
lists.gleasonguitars.com
lists.glendoraoakland.com
lists.gracemahomet.info
lists.greatwhatsit.com
lists.grooveentertainmentnj.com
lists.healinggardenworld.com
lists.hearthcom.com
lists.hearthcommunities.com
lists.heartoftheartist.org
lists.hearty-gourmet.com
lists.hernans.com
lists.highfiveproperties.com
lists.hillabbey.org
lists.himrecruiters.com
lists.hinghamcemetery.org
lists.homesteadsection4.org
lists.hopalongmail.org
lists.hopework.org
lists.hotelklas.com
lists.hr1964.org
lists.hr64.org
lists.hwlf.org
lists.i-ddb.com
lists.iajgs.com
lists.iajgs.net
lists.iajgs.org
lists.iajgs2016.org
lists.iajgs2017.org
lists.iajgs2018.org
lists.iajgs2019.org
lists.iajgs2020.com
lists.iajgs2020.org
lists.iajgs2021.com
lists.iajgs2021.org
lists.iajgs2022.com
lists.iajgs2022.org
lists.iajgsjewishcemeteryproject.org
lists.ihubbell.com
lists.imperialbeachfarmersmarket.org
lists.improvplayworks.com
lists.indicant.net
lists.indoexpat.org
lists.indosoc.org.uk
lists.infowindnewnews.com
lists.innerphysician.com
lists.innertruthmassage.com
lists.innosci.net
lists.integrativephysicaltherapyservices.com
lists.interstell.com
lists.inuverse.com
lists.ipte.net
lists.irisarri.org
lists.israelaction.org
lists.italiansrus.com
lists.iucnosg.net
lists.jacobkaye.com
lists.jeffreygurian.com
lists.jejuneinstitute.org
lists.jessicalevine.info
lists.jessicalevineartist.com
lists.jesslevine.com
lists.jfmf.org
lists.jgsgb.com
lists.jgsgb.org
lists.jillmanning.com
lists.jkswineandliquor.com
lists.jmwauction.com
lists.jmwauctions.com
lists.joekowan.com
lists.joelpalmermusic.com
lists.johnjdomont.com
lists.jolenesladekova.com
lists.joshuarich.com
lists.julieharrington.net
lists.jumpingrock.net
lists.justcomm.org
lists.justmakestuff.org
lists.justusnyc.org
lists.katzenfinch.com
lists.keithavenue.org
lists.kempiweb.net
lists.kentest.com
lists.kentnerburn.com
lists.kfjc.org
lists.kigreene.com
lists.kitbradley.net
lists.kokotele.net
lists.kokoteleguitarworks.com

Other certificates including the domain name galvanys.com

(limited to 100 certificates)
customers.tigertech.net
lists.galvanys.com
lists.0100101110101101.org
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net

Certificate

The complete raw certificate details for lists.galvanys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wlF6Klu0djG8c+5SeUp
L7N+ejHU/fT2yivnlOWRX3nFqPgCr2PQofgXPSNK6XMbMLZUAUR1Mwx0XI9cp35h
QkqIyK/ekonNY1YBhH/X0ThI41X8UYdrCAsdrFvd0F4CQZnFw3k7B64WGdlYVUyx
sgSj4JwaFtUZoqc8uPuuY7JY8qWq1TdKAuT9EW5gik9yK1sD8q3GKH+Ofx6E/npz
jmNZuCR9QntAinRLbHmW+rcbKk2iZ6QRUAsIYdXByRt39JqAMFTwmCZr1Cd3SH6J
1HiIEhPoptD0Qa74xBhrAqDtzMUKUDWQ4b7cibJ4rSQCMnH/I2KDyyyQyPYsz5yi
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321622420674856068893770621482913562955927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 15:51:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-26 15:51:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.galvanys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27650761514427149602033558811317846423207531556153438554187510783830505669673197512410116943173028157684872969702828790075113033339834758379576366116634491429824057950069752812888773121015244804462686950096095981115547671260512974887432280576810073398469123666507412683513098342118399040218130758183196571946608721694064927579899192393114819393786474948947108760406597093406235713436093498623941738664624220023524878123301456118276278304701546529991055038316670777107709752291633363287118960082885591993765727588309300066845799677100049170165435207833019534795880921481308954969360249412381206461707265996179963159279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35f409140d4c486a1415ac2fce33638293e75229
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.galvanys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ganhalev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.gatewaykeith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.geminiandscorpio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.gemologyproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.genealogycenter.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.genealogycenter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.genealogycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.georgiabikes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.gjsgjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.gleasonguitars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.glendoraoakland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.gracemahomet.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.greatwhatsit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.grooveentertainmentnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.healinggardenworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hearthcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hearthcommunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.heartoftheartist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hearty-gourmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hernans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.highfiveproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hillabbey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.himrecruiters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hinghamcemetery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.homesteadsection4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hopalongmail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hopework.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hotelklas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hr1964.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hr64.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hwlf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.i-ddb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2016.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2017.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2018.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2019.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2020.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2021.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2022.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgsjewishcemeteryproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ihubbell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.imperialbeachfarmersmarket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.improvplayworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.indicant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.indoexpat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.indosoc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.infowindnewnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.innerphysician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.innertruthmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.innosci.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.integrativephysicaltherapyservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.interstell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.inuverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ipte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.irisarri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.israelaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.italiansrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iucnosg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jacobkaye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jeffreygurian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jejuneinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jessicalevine.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jessicalevineartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jesslevine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jfmf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jgsgb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jgsgb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jillmanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jkswineandliquor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jmwauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jmwauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joekowan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joelpalmermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.johnjdomont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jolenesladekova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joshuarich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.julieharrington.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jumpingrock.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.justcomm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.justmakestuff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.justusnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.katzenfinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.keithavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kempiweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kentest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kentnerburn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kfjc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kigreene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kitbradley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kokotele.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kokoteleguitarworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fc01d3d5e0000040300463044022015c45b27a3be7bdc145e00b5f790f997e65a4c3a8db4ec1035e387d4277679d802202778a721d8f59db6a45affe0f505a3f8ae1a36b2c208cdb0609559fd6c88d87a00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fc01d3d8f00000403004730450220278d086e7a6ab6bb6cbcfeb6c1df6936a3e0df3f2ec4303528712b2e6ed82d15022100940d031e2e559639da213d33aa831169684042ec9027f73b201131edb8133247
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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