westtexasroughnecks.com

Issued by R3

About this certificate

This digital certificate with serial number 04:20:31:7b:d6:f8:1a:2f:0b:5b:30:31:9e:f3:15:e3:61:84 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=westtexasroughnecks.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:20:31:7b:d6:f8:1a:2f:0b:5b:30:31:9e:f3:15:e3:61:84
Serial Number (int): 359403954652910421047286242306046420017540
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:69:92:03:fe:85:75:a0:c5:25:cf:e2:fd:a1:d1:9f:de:61:9f:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0b:2a:92:86:f1:7d:58:79:4a:9c:5f:59:ba:a3:ff:7c:5b:76:46:6b
Fingerprint (sha256): 1b:70:68:52:65:f2:cf:36:ea:9b:da:b2:0e:13:e4:ad:f7:9c:f7:8b:fe:c7:c9:35:2d:c5:0e:76:79:82:8f:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate westtexasroughnecks.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for westtexasroughnecks.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.analogdrivemagazine.com
*.ativandoseuresultado.com
*.bottrading.co
*.bowling-tips.com
*.budgrt.com
*.coleshop.biz
*.datingmymother.com
*.giee.net
*.govermentpk.com
*.himachalboxes.com
*.hoggetowne.com
*.kovanev.net
*.kwildeimagery.com
*.learningpromt.wiki
*.leembe.com
*.multileveled.com
*.myp2p.us
*.mytamilyogi.xyz
*.noted-eye-opener-to-view-today.info
*.oldtimesantique.com
*.onfirestore.net
*.open-market.net
*.planetfirness.com
*.qmrhm.com
*.seanandersonauthor.com
*.shamanickundaliniawakening.com
*.shreyashankar.com
*.softonicx.com
*.soogo.cc
*.ssroofingofpolk.com
*.sssoouu.com
*.ssvusgarments.com
*.staackflorist.com
*.stalinramesh.com
*.starltt.com
*.startupclubtahiti.com
*.starvbucks.com
*.steampoweredstore.com
*.steevesteam.com
*.stephanqwelch.com
*.steventraklaw.com
*.stihles.com
*.timeandtidewatches.com.au
*.tradexadvisors.com
*.uxjf.com
*.victoria.wine
*.westtexasroughnecks.com
*.worldstudyabroad.org
*.zaplink.io
*.zinnphotography.net
analogdrivemagazine.com
ativandoseuresultado.com
bottrading.co
bowling-tips.com
budgrt.com
coleshop.biz
datingmymother.com
giee.net
govermentpk.com
himachalboxes.com
hoggetowne.com
kovanev.net
kwildeimagery.com
learningpromt.wiki
leembe.com
multileveled.com
myp2p.us
mytamilyogi.xyz
noted-eye-opener-to-view-today.info
oldtimesantique.com
onfirestore.net
open-market.net
planetfirness.com
qmrhm.com
seanandersonauthor.com
shamanickundaliniawakening.com
shreyashankar.com
softonicx.com
soogo.cc
ssroofingofpolk.com
sssoouu.com
ssvusgarments.com
staackflorist.com
stalinramesh.com
starltt.com
startupclubtahiti.com
starvbucks.com
steampoweredstore.com
steevesteam.com
stephanqwelch.com
steventraklaw.com
stihles.com
timeandtidewatches.com.au
tradexadvisors.com
uxjf.com
victoria.wine
westtexasroughnecks.com
worldstudyabroad.org
zaplink.io
zinnphotography.net

Other certificates including the domain name westtexasroughnecks.com

(limited to 100 certificates)
westtexasroughnecks.com
westtexasroughnecks.com
westtexasroughnecks.com

Certificate

The complete raw certificate details for westtexasroughnecks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359403954652910421047286242306046420017540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 10:31:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 10:31:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'westtexasroughnecks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 669196973864904932255131520535022905299330560404901879989341251413051783069689948793936787716555332706708766969856352009538563166429101611255586251839419618430541272822938833613525469303582728180824270808878668129473548004773066580656950119030760581029303144766851970630577697327359695802945174091233041623555991323995817924576977966159380791128442287392852385075415909113807076122150986620828089650213324691990373830306954445191657197507068420106334451772136344994230470891982318835350846603222685608116751986577562493662569969009009802143246246209146868300751322531073281349308181939325443944334263452280907053862345060546782775076041875861081435497553347616219687073765345674965104939700901506627592199342844108576656966163314848743794222958783348715794558691303759859500185016503416408633324381771992897492476702564345629845072966709969543116527771437921138534521870861684892966237919535786457375557383582630882090874797624340770061220088921722788939749708106767769509281803678419835143270733679519718669618710356315733004372819375604360342377218207117388797619414289482292309869230921874957169650684603288053936836604274286354143556078724552738369147655625498974643759184920809053509420172263890340054077894780892284157030947947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18699203fe8575a0c525cfe2fda1d19fde619f82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1920 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analogdrivemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ativandoseuresultado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bottrading.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bowling-tips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budgrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coleshop.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datingmymother.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govermentpk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.himachalboxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoggetowne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kovanev.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kwildeimagery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learningpromt.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leembe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multileveled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myp2p.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytamilyogi.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noted-eye-opener-to-view-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oldtimesantique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfirestore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.open-market.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planetfirness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qmrhm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seanandersonauthor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shamanickundaliniawakening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shreyashankar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.softonicx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soogo.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssroofingofpolk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sssoouu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssvusgarments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staackflorist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stalinramesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starltt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startupclubtahiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starvbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steampoweredstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steevesteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stephanqwelch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steventraklaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stihles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timeandtidewatches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradexadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uxjf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victoria.wine'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westtexasroughnecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldstudyabroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zaplink.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zinnphotography.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analogdrivemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ativandoseuresultado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bottrading.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowling-tips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budgrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coleshop.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datingmymother.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govermentpk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'himachalboxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoggetowne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kovanev.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwildeimagery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningpromt.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leembe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multileveled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myp2p.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytamilyogi.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noted-eye-opener-to-view-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldtimesantique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfirestore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open-market.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetfirness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qmrhm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seanandersonauthor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shamanickundaliniawakening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shreyashankar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softonicx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soogo.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssroofingofpolk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sssoouu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssvusgarments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staackflorist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stalinramesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starltt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startupclubtahiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starvbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steampoweredstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steevesteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephanqwelch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steventraklaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stihles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timeandtidewatches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradexadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxjf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoria.wine'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westtexasroughnecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldstudyabroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaplink.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnphotography.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aeb02081f0000040300463044022007220dc3076c4a37d03d16a765a32a6914824df0bde97c4d2a28b38391f077ae02202fdce3c87537dba3dfa806b628eed60d9ac6e8c15e1ae00ed423cf6d4ad965e30075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aeb0208270000040300463044022035380f74ebdef0baaa3bfc9e1b1cc2bb330df698902b0b87be86586f4d712f430220410613b56e725e32fbd79d713a7995f2606769579d16d927f815c679b5f401a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006a0d07faa0a55696649c3b9efb1e21ced407891f2335c282cde0030f741478f4aa53c301e7825ebe75985b030cc3e50175a9113571b7d8fa2dfcb834db93672b0b35a3cefb68b65253352f818a28d4ff6a32bc1aa94ec0020f114046827434b25956d0ac5208956ae6b87d9010aebaa091e3a22bd6b60c5395378ad5c631a6714358febe32778410899f29c368a43f80071a3dcbea4bacb36cdcca43df2f9af725e29507c56c2caa939d719bf7159184b93540750694a5d24c6d6e4f08197bb507cd8e48b184317b5dfc8975810cfeb2602e48db6880ed680335cdd33d86b0be6c5ef45ef89365da0e6646f3d897defbf971524be50873d7307a08d372273bff