www.legalmalaysia.com

Issued by R3

About this certificate

This digital certificate with serial number 04:99:71:9d:be:c9:98:e0:77:00:51:99:e8:43:9a:30:b8:4d was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.legalmalaysia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:99:71:9d:be:c9:98:e0:77:00:51:99:e8:43:9a:30:b8:4d
Serial Number (int): 400663367689705055399996164414241267300429
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f8:35:9f:d8:a7:8e:22:df:1b:d9:80:3e:03:7e:db:e5:8a:48:c6:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:a3:15:90:95:da:1b:66:4c:fb:b8:e1:97:20:ca:91:00:31:10:f2
Fingerprint (sha256): 1b:c8:76:0e:f5:6a:67:5f:b3:d1:50:b7:a4:5d:04:0e:0e:79:4e:cb:80:9e:0f:d3:31:cb:81:0e:88:bd:3c:d8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.legalmalaysia.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.legalmalaysia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arabgeographic.com
australiaonlinejob.com
bestorganicrice.com
budapestlaw.org
businesspda.com
campuselectronic.com
cutandweld.com
developalgorithm.org
dubaiscreens.com
edinburghwealth.com
enabletransactions.com
freshgraduatejob.com
futurespacestation.com
giuh.com
joblessyoung.com
keysphere.org
kosovoradio.com
legalmalaysia.com
lidarminings.com
literaturejamesjoyce.com
litigationfunds.org
mindcontrolledinterface.com
monacoauctions.org
monsterscreated.com
natureofnothing.org
negativewealth.com
netluxembourg.com
newstadiumplace.com
nightvisionengineering.com
oceantelephone.com
offshorecryptofund.com
offshoreelectronic.com
offshoregram.org
organicsprouted.com
personalvideogames.com
prelusion.org
printinghealing.com
publishingfund.com
renewablestate.com
rocketfueling.org
sovereignspa.com
stuttgartboerse.com
supplywater.org
tankwarfare.org
weekendpanama.com
www.arabgeographic.com
www.athensweekend.com
www.balidrama.com
www.berlinboerse.com
www.campuselectronic.com
www.commoditydash.com
www.cryptomaid.com
www.cutandweld.com
www.dubaioffshore.net
www.dubaiscreens.com
www.fundingvc.com
www.futurespacestation.com
www.groupeanglais.com
www.interfactura.org
www.joblessyoung.com
www.keysphere.org
www.kosovoradio.com
www.legalmalaysia.com
www.lidarminings.com
www.literaturejamesjoyce.com
www.mindcontrolledinterface.com
www.monsterscreated.com
www.natureofnothing.org
www.negativewealth.com
www.netluxembourg.com
www.newstadiumplace.com
www.nightvisionengineering.com
www.oceantelephone.com
www.offshoreelectronic.com
www.offshorela.com
www.organicsprouted.com
www.personalvideogames.com
www.prelusion.org
www.publishingfund.com
www.renewablestate.com
www.rigoffshore.net
www.rocketfueling.org
www.thefutureofsolarenergy.com
www.thesubmarine.org
www.tokyoattorney.net
www.useofsolarenergy.com

Other certificates including the domain name legalmalaysia.com

(limited to 100 certificates)
mindcontrolledinterface.com
informationmalaysia.com
www.justicemalaysia.com
recruitmentrussia.com
www.eastrussia.com
www.legalmalaysia.com
sovereignspa.com
eastrussia.com
oceantelephone.com
www.exchangearmenia.com
arabgeographic.com
forceofinertia.com
www.waterdispensermalaysia.com
offshoreelectronic.com
recruitmentrussia.com
eastrussia.com
www.forceofinertia.com
www.forummalaysia.com
romanticvirginiabeach.com
www.berlinboerse.com
www.antitrustrussia.com
www.futurespacestation.com
www.monopolyrussia.com
www.offshorescandinavia.com
legalmalaysia.com
romanticvirginiabeach.com
stuttgartboerse.com
recruitingnigeria.com
www.rocketfueling.org
expomalaysia.com
eastrussia.com
forceofinertia.com
nightvisionengineering.com
www.berlinboerse.com
offshorefinanceindustry.com
www.modernmalaysia.com
enabletransactions.com
www.prelusion.org
bestorganicrice.com
bestorganicrice.com
www.modernmalaysia.com
talentedpoverty.com
www.offshoreelectronic.com
www.thefutureofsolarenergy.com
nightvisionengineering.com
www.literaturejamesjoyce.com
arabgeographic.com
www.modernmalaysia.com
www.sportrussia.com
www.informationmalaysia.com
www.offshorescandinavia.com
eastrussia.com

Certificate

The complete raw certificate details for www.legalmalaysia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8b5i6mCxGbO7DM63Hf9A
KfAXt7EJoIiozGYTxPYa0ZCZNBNBTV/Hhfluzr4+s34QK0YkXYA0gDba5Sbqyf6z
fPCAwkjV6+HAX3NXx9MDcfbPl+C4jZarKsZsOJ4wItfUHb58Cai8VUqrOxioEepj
VTphdIheQEHumXsjQRQ5+4DJVQo1c4jMYsLQK2NNpkK4vEzAzq1OrPQtaRUXYRiV
k7iNBazqH/boNWhMgBVygOwy7venUySFDMJ9U3GONsB/foNkpTcQTxv5FdvA+POb
nXxcUH6Jup3ycNnBUbxzQXdYQViEHS3Wk+RpgOBQpJDiLOWDHiOcsEBBijzApYmI
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400663367689705055399996164414241267300429
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 11:31:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 11:31:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.legalmalaysia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30517314524215580276254683981986831110750901234000457143403564876739628832396531363374139435147732025574064234122453009899084687412604485557332013567054333449144005775188396179344431875186070161350047863616850008379802496507577129688583713190336996692466431581541436475279270039941320055830241353573116438122538162703332467902023146389061151145432274970982145068062567973414445405213590894341536028214632351858095574049227409981620177556644011484550164302231964671018644874329869209702063380132194457802431669140217213608419929520786498009867937560004204354078654725507986439962093864106667091708879209000607630854271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8359fd8a78e22df1bd9803e037edbe58a48c6e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1890 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australiaonlinejob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestorganicrice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budapestlaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesspda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campuselectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutandweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developalgorithm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaiscreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edinburghwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enabletransactions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshgraduatejob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurespacestation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giuh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joblessyoung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysphere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosovoradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalmalaysia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lidarminings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literaturejamesjoyce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litigationfunds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindcontrolledinterface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monacoauctions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterscreated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natureofnothing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negativewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netluxembourg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstadiumplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightvisionengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceantelephone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorecryptofund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreelectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoregram.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicsprouted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalvideogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prelusion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printinghealing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publishingfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewablestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketfueling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuttgartboerse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplywater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankwarfare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekendpanama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arabgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athensweekend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balidrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinboerse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campuselectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commoditydash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptomaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cutandweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaioffshore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaiscreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundingvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurespacestation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groupeanglais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interfactura.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joblessyoung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keysphere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kosovoradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalmalaysia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lidarminings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literaturejamesjoyce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindcontrolledinterface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterscreated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natureofnothing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.negativewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netluxembourg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newstadiumplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nightvisionengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceantelephone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoreelectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicsprouted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personalvideogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prelusion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publishingfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renewablestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rigoffshore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocketfueling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefutureofsolarenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesubmarine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokyoattorney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.useofsolarenergy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d02ce8bb5000004030047304502210086ba90db4050064f2c16f07546438247b10f6b2e23975e6d57ed40ee20582f7602204235249ce2b9acda9e0ee15dd9ccb58bcc9708c4b8f6c1f263af0505e30857e700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d02ce8c5b0000040300473045022018b3b655c19a0e92d76b7144b6ab4c905c0b512638f959c39ad60b9fe1348bd3022100cc26749f472a7d18574562f3797cc7a7102916e0fa41e8cbadb650e415fd819c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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