www.copyrightcinema.com

Issued by R3

About this certificate

This digital certificate with serial number 04:43:12:26:60:97:aa:c5:80:15:38:ef:04:30:0e:1f:3d:13 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.copyrightcinema.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:43:12:26:60:97:aa:c5:80:15:38:ef:04:30:0e:1f:3d:13
Serial Number (int): 371272187681076242152828611748449052736787
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5d:7f:41:ae:bb:a2:e1:7e:2d:3d:31:64:d6:ef:ee:99:2f:89:37:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ea:fd:82:cc:98:6b:b4:84:c8:4c:42:89:f7:9a:87:db:88:c9:7d:85
Fingerprint (sha256): 22:a2:bf:6c:41:c9:fc:61:2c:b7:df:72:b1:90:29:2e:00:26:d0:f7:01:f2:ba:65:38:61:ad:02:02:c6:5c:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.copyrightcinema.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.copyrightcinema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

28radio.com
absroller.org
algorithmdeveloper.net
angolaenergy.org
bitcoinagence.org
brazillivetv.com
caymanhouses.com
chinaafricadevelopmentfund.org
connaisance.org
deeplearningguide.com
delhiorganic.com
dresdenfinance.com
entertainmind.com
footballfinance.org
fresnostudio.com
generateelectricity.net
grupobitcoinfinance.com
heavytransportship.com
hollywoodrevolution.org
illinoisconference.com
impactsociety.net
insuranceafrica.org
jazzmusicians.org
kazakhstanrepublic.com
moscowpicture.com
mythicalheroes.org
nighttrade.org
offshoreingenuity.org
paleolithicage.org
palosverdespreschool.com
performinghiphop.com
portcapacity.net
punjabiconference.com
readingdeclarationofindependence.com
rigoffshore.com
roswelltechnology.org
sexismandthecity.net
sexisminthecity.net
theilliad.org
troypreschool.com
underseamining.org
underwatersurveys.org
vietnamlivetv.com
www.28radio.com
www.absroller.org
www.artistpublicity.net
www.bangaloreoffshore.com
www.brazillivetv.com
www.caymanhouses.com
www.chinaafricadevelopmentfund.org
www.connaisance.org
www.continentalleasing.org
www.copyrightcinema.com
www.deeplearningguide.com
www.delhiorganic.com
www.dieselengine.com
www.edmontonstudio.com
www.footballfinance.org
www.generateelectricity.net
www.heavytransportship.com
www.hellenicshipbrokers.org
www.hollywoodrevolution.org
www.hotmaharashtra.com
www.illinoisconference.com
www.impactsociety.net
www.insuranceafrica.org
www.jazzmusicians.org
www.landesbankgirozentrale.org
www.movieworldguide.com
www.mythicalheroes.org
www.newsphoenix.org
www.offshoreingenuity.org
www.paleolithicage.org
www.palosverdespreschool.com
www.performinghiphop.com
www.portcapacity.net
www.punjabiconference.com
www.roswelltechnology.org
www.sanjuanfinance.com
www.sexismandthecity.net
www.sexisminthecity.net
www.theilliad.org
www.troypreschool.com
www.undergroundfrance.com
www.underseamining.org
www.vietnamlivetv.com
www.writingfinance.com

Other certificates including the domain name copyrightcinema.com

(limited to 100 certificates)
underwatersurveys.org
www.freelatinocinema.com
www.nabourema.com
parisiancinema.com
palosverdespreschool.com
consciousnessexpanded.org
shakespeareenigma.com
grupobitcoinfinance.com
www.indonesiancinema.com
www.mandaluyongcity.net
piledrivingvessel.com
www.vesselfield.com
southdakotapost.com
www.impactsociety.net
fresnostudio.com
estotericsoftware.org
abcfamilycinema.com
www.performinghiphop.com
grupobitcoinfinance.com
www.copyrightcinema.com
www.nabourema.com
deeplearningguide.com
www.delhiorganic.com
insuranceafrica.org
www.africadevelopmentbank.org
consciousnessexpanded.org
www.afroman.org
www.mythicalheroes.org
www.mandaluyongcity.net
www.nabourema.com
www.writingfinance.com
www.canima.com
www.kazakhstan247.com
www.oceaniclife.net
www.indonesiancinema.com
theilliad.org
afroman.org
doctorsnotice.com
tanguucinema.com
www.shakespeareenigma.com
www.northchinapost.com
chatcinema.com
consciousnessexpanded.org
insuranceafrica.org
africadevelopmentbank.org
www.radiomarittima.com
www.dieselengine.com
www.supplyexecutive.com
continentalcinema.com
www.blockchaintutors.org
www.estotericsoftware.org
travauxcinema.com
caymanhouses.com
www.portcapacity.net
www.optikfibre.com
www.nabourema.com
iceageconstruction.com
africadevelopmentbank.org
www.optikfibre.com
consciousnessexpanded.org
troypreschool.com
copyrightcinema.com
underwatersurveys.org
postproductioncinema.com
www.roswelltechnology.org
orangecountycinema.com
onceinroyaldavidcity.net
offshoreinvestcenter.com
continentalcinema.com
www.loajanan.com
africadevelopmentbank.org
www.shakespeareincinema.com
www.abcfamilycinema.com
radiomarittima.com
www.roswelltechnology.org
www.onceinroyaldavidcity.net
toolsfordecisions.com
www.optikfibre.com
zenima.com
www.dieselengine.com
gujaratcinema.com
www.energyzimbabwe.com
www.produceantigravity.net
postproductioncinema.com
www.ladyjobs.com
nabourema.com
www.dieselengine.com
datema.com
environmentalresponsibilty.net
www.offshoreground.com
www.copyrightcinema.com
www.stockholmtrading.com
loajanan.com
www.dieselengine.com
copyrightcinema.com
www.africadevelopmentbank.org
americanindianequity.net

Certificate

The complete raw certificate details for www.copyrightcinema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1kZW2ejmywKI6W2uZgQ
m/c3e3kLqBI3fKtItwaPnM6VJvCsDbSdBM9qN91HyV3F0FKdWtpxtuTZCEl4WY6z
SvDecwaGmaaszO70Z9zOByQbzu0H2oDkVy7P88u+1/8WOKCvPyxfsuVaNj15NiHq
23IOE0SgDKCueo9lTWEbJJNzsYIt8qbQpauCNR8Fe5cr0RWx2sBEZjqQWBSDP5HM
dwyQE4TlT4LtqfipSjcEak8SZ9LPf07BUj3IKI2OrEQRsOEm1/coAdzDnrGJ/urS
zsxDAU4+XxerTTZOoU20LlN+XXLRO8ZWLSWtJs09j8r1Dlc6cRRFWje4rTKOar5n
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371272187681076242152828611748449052736787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 11:41:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 11:41:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.copyrightcinema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21630686528764161516168301812610338283861683846121385280345780572654002302823615375751249543610913190003928120647759928658691783211314693352837010280497202639357950462238269487171113913814549689787716004593907645469656390094531633621004808397089921045656161713387865729664060826954372914322522323617398512950090183316168688214465684075356346139846221129526365834602410512683275436040234425716838273935441933964162508266880232277818760668104773558084400044441364145166881367332878785965342393061759935173539980009796940655640750363850426263969070784678315662758623550730892397464355344235637525640762785996437268096993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d7f41aebba2e17e2d3d3164d6efee992f8937e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2007 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '28radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absroller.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algorithmdeveloper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angolaenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinagence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazillivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caymanhouses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaafricadevelopmentfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connaisance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeplearningguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delhiorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dresdenfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainmind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballfinance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fresnostudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generateelectricity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupobitcoinfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heavytransportship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywoodrevolution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impactsociety.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuranceafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazzmusicians.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazakhstanrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moscowpicture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythicalheroes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nighttrade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreingenuity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paleolithicage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palosverdespreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performinghiphop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portcapacity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punjabiconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readingdeclarationofindependence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roswelltechnology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexismandthecity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexisminthecity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theilliad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troypreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underseamining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underwatersurveys.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnamlivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.28radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.absroller.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artistpublicity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bangaloreoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brazillivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caymanhouses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaafricadevelopmentfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connaisance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.continentalleasing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copyrightcinema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deeplearningguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delhiorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dieselengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edmontonstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballfinance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generateelectricity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heavytransportship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellenicshipbrokers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollywoodrevolution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotmaharashtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.illinoisconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impactsociety.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insuranceafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jazzmusicians.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landesbankgirozentrale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movieworldguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mythicalheroes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsphoenix.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoreingenuity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paleolithicage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palosverdespreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.performinghiphop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portcapacity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punjabiconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswelltechnology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sexismandthecity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sexisminthecity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theilliad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troypreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.undergroundfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.underseamining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietnamlivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.writingfinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1771121a000004030047304502210082e5fe87cb76ef904fdb4d8a96c4c80fa183bedd267238215ba906f0af88c21802203cf9ca33d63679ffd243c2484663f82f6cded7193d4c1c6b4442217f4beb7dee007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d177112210000040300473045022060b6fa547ff96467504f86daafd77e234cf2ba35346cb49f284e81cd28660560022100d28d8aad7c66b9f4cc68abded222d9505ba8fdd2df1da4e2a1dbd7df2960dacc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005dac0e4505ac7013ed3449c01996f910397ca5c5f53c460313356577dc17d386bf57b345602ca4fbfad2e52195fb39b6323b6b1487286dc7162d6afd499243225a7288a25671e7271a0333781f89866dc9e420cc8a2d847f93bf4540a49b53ed26465de48195ac63d442bad97cc703c9d92886c506deb5f1c7b57ef3e660f9414610db03706d27bceeec0f8ed4dd1ecaf51ff73ad327539eecfc631ab2c310b98c51158bc4cf1fa0d5a3c1980b70ee4213e1515b450c5505bcc1b073ce49924ef7100bf40a65cbf55d12a8fe2800f58c66f8a756bf1cdf7571218632ab49ff3651974b67e038c8b79dd55577eb8d10d74774c583d572f3ba81a1fbff77329394