sovereignspa.com

Issued by R10

About this certificate

This digital certificate with serial number 04:a4:95:38:02:e0:99:af:c3:be:1b:71:94:09:2e:fc:03:d9 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sovereignspa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:a4:95:38:02:e0:99:af:c3:be:1b:71:94:09:2e:fc:03:d9
Serial Number (int): 404453797700430416313286872471249843127257
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f6:88:0f:55:36:30:70:ea:6c:1a:bb:8f:f0:fc:51:61:1c:f3:db:56
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): b1:e2:0e:aa:fa:a6:73:1b:ae:e6:8e:9f:ec:ed:c6:38:ae:59:6a:4c
Fingerprint (sha256): 22:ce:0c:9b:4d:85:29:a6:9b:44:d1:fe:10:f6:0f:52:5d:a8:1b:41:ce:41:be:22:ec:e3:48:ec:9c:29:f2:24

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate sovereignspa.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sovereignspa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agencebiz.com
arabgeographic.com
australiaonlinejob.com
bestorganicrice.com
businesspda.com
campuselectronic.com
chaingaz.com
chinacharisma.com
cutandweld.com
developalgorithm.org
edinburghwealth.com
enabletransactions.com
exchangearmenia.com
freshgraduatejob.com
futurespacestation.com
giuh.com
keysphere.org
kosovoradio.com
legalmalaysia.com
lidarminings.com
literaturejamesjoyce.com
litigationfunds.org
mindcontrolledinterface.com
monsterscreated.com
nauticalcranes.com
negativewealth.com
newstadiumplace.com
nightvisionengineering.com
oceantelephone.com
offshorecryptofund.com
offshoreelectronic.com
offshoregram.org
organicsprouted.com
personalvideogames.com
polandequity.com
prelusion.org
publishingfund.com
recruitingnigeria.com
renewablestate.com
sovereignspa.com
stuttgartboerse.com
talentedpoverty.com
tradecarpenter.com
trustoklahoma.com
weekendpanama.com
womenbiographies.com
www.agencebiz.com
www.arabgeographic.com
www.athensweekend.com
www.berlinboerse.com
www.campuselectronic.com
www.chaingaz.com
www.commoditydash.com
www.cryptomaid.com
www.cutandweld.com
www.dubaioffshore.net
www.exchangearmenia.com
www.farmethiopia.com
www.futurespacestation.com
www.grandsyria.com
www.groupeanglais.com
www.interfactura.org
www.keysphere.org
www.kosovoradio.com
www.legalmalaysia.com
www.lidarminings.com
www.literaturejamesjoyce.com
www.logisticsethiopia.com
www.mindcontrolledinterface.com
www.monsterscreated.com
www.nationaljetcharter.com
www.nauticalcranes.com
www.negativewealth.com
www.newstadiumplace.com
www.nightvisionengineering.com
www.oceantelephone.com
www.offshoreelectronic.com
www.offshorela.com
www.organicsprouted.com
www.personalvideogames.com
www.prelusion.org
www.publishingfund.com
www.recruitingnigeria.com
www.renewablestate.com
www.rigoffshore.net
www.shipownersregistry.com
www.talentedpoverty.com
www.thefutureofsolarenergy.com
www.tokyoattorney.net
www.tradecarpenter.com
www.trustoklahoma.com
www.useofsolarenergy.com
www.womenbiographies.com

Other certificates including the domain name sovereignspa.com

(limited to 100 certificates)
www.cryptomaid.com
www.jointinterview.net
mindcontrolledinterface.com
www.businessfundingshow.net
abafree.com
jointinterview.net
www.sovereignspa.com
offshoreanguilla.com
www.cubistartshow.net
www.legalmalaysia.com
sovereignspa.com
www.offshorecryptoltd.org
oceantelephone.com
www.offshorecryptoltd.org
www.exchangearmenia.com
offshoreanguilla.com
www.offshorecryptoltd.org
www.sovereignspa.com
www.offshorecryptoltd.org
whoisyellow.net
arabgeographic.com
westafriocacoffee.com
offshoreelectronic.com
www.musictonga.com
pricesbelow.net
www.sovereignspa.com
offshoreanguilla.com
www.sovereignspa.com
www.sovereignspa.com
romanticvirginiabeach.com
www.berlinboerse.com
www.futurespacestation.com
cablemilan.com
www.offshorecryptoltd.org
www.worldbankcorruption.net
romanticvirginiabeach.com
offshoreelectronic.com
offshoreanguilla.com
netluxembourg.com
stuttgartboerse.com
offshorefinanceindustry.com
recruitingnigeria.com
offshoreanguilla.com
www.rocketfueling.org
www.sovereignspa.com
www.sovereignspa.com
environmentsecretary.com
bestorganicrice.com
www.offshorecryptoltd.org
www.cutandweld.com
nightvisionengineering.com
www.joanmiroshow.net
www.berlinboerse.com
propagandafilmshow.net
offshorefinanceindustry.com
www.offshorecryptoltd.org
enabletransactions.com
www.jointinterview.net
www.prelusion.org
www.publishingfund.com
offshoreanguilla.com
bestorganicrice.com
bestorganicrice.com
talentedpoverty.com
www.universityofpanama.com
www.offshoreelectronic.com
organicsprouted.com
westafriocacoffee.com
www.offshorecryptoltd.org
www.thefutureofsolarenergy.com
nightvisionengineering.com
www.literaturejamesjoyce.com
westafriocacoffee.com
www.panamajob.com
picassoshow.net
armsshow.net
arabgeographic.com
www.offshorecryptoltd.org
critiquefullshow.net
www.berlinboerse.com
www.monsterscreated.com

Certificate

The complete raw certificate details for sovereignspa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AS5QCGBa2YcdPQLBZUv
sIV3hoO1cEkM5GzPipwC8aScYmqZ0fyQnLOkcUq3iVjqlvKa/jMNGiwSfJlAb+Nt
3GIom9SANypiFe4+dFbYyFUh6rmYdbqUfv5FvnNWWQdyDBHtyN/tdjRx4GY6gYxT
g5JFQMaATaOR++jksAk6RxNZahD8ok0h3m/TWiizX4gKQ3Z5zw6k+WRzcOBhD6Eb
uipyk0XpvMRmoFsEIWhWJtmPimxHN3xSZGSkEsdfN+8BPwz1M7+ACi/XtzSpMoUM
uVHPJPVP9z1vus3gXyJnwok19JqXMzJ+FGFacQjYTpD+IXlQBccUDIYYdRNy1q+E
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404453797700430416313286872471249843127257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 10:32:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-12 10:32:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sovereignspa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26764849963943649879964169961307980182595586803962029730424623668307952728186259701325750912724430970708452852744767255252810532119257011520728324287341980299335620723117855733303565639441468282025327981550819852012341331167372622009898300659404396820696580394867533733559295662255351314941836130095189530324169817773993433653574346714357216880795280175526380244822971745736495024341307125180141227160511999319816458548150609111565568306792158262052421318603528509600166113748242598685399966224565204585587633611587791681824315799742856128936871915368927863395894590486334651597664392163829990151560949253570066089193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6880f55363070ea6c1abb8ff0fc51611cf3db56
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2076 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australiaonlinejob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestorganicrice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesspda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campuselectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaingaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinacharisma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutandweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developalgorithm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edinburghwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enabletransactions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangearmenia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshgraduatejob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurespacestation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giuh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysphere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosovoradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalmalaysia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lidarminings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literaturejamesjoyce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litigationfunds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindcontrolledinterface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterscreated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nauticalcranes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negativewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstadiumplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightvisionengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceantelephone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorecryptofund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreelectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoregram.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicsprouted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalvideogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polandequity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prelusion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publishingfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitingnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewablestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuttgartboerse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentedpoverty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradecarpenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustoklahoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekendpanama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenbiographies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agencebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arabgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athensweekend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinboerse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campuselectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaingaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commoditydash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptomaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cutandweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaioffshore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exchangearmenia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmethiopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurespacestation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandsyria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groupeanglais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interfactura.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keysphere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kosovoradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalmalaysia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lidarminings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literaturejamesjoyce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logisticsethiopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindcontrolledinterface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterscreated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaljetcharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nauticalcranes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.negativewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newstadiumplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nightvisionengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceantelephone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoreelectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicsprouted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personalvideogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prelusion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publishingfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recruitingnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renewablestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rigoffshore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipownersregistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talentedpoverty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefutureofsolarenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokyoattorney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradecarpenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trustoklahoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.useofsolarenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.womenbiographies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000019016853eef0000040300483046022100a9c2832c889108fb8b988bd879dee5c7e00dceaaed1bd72c6e29c7550e9250ce022100d76cf3f57acd73f1ab2acbcba3018d40a9dbd6f6a583fa6bd39bfa7db29cfac5007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000019016853fc60000040300473045022100f7bc154ac8085da1fe25fc2592587c344a91eb8db7165df565943118d0d8630f0220788afe52ddd107f47098582077ca7908b5891654da06f592275af051919c053e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b9d337f47524b5bca5ee173ed83ee5717fd0bcd91e66720dee52841147a9597142edcb8354199de1fb45ebb83aa2a363ea47add2c81c74682b4dbe78a761ea7fcf5aed2cbb03b6ac03f503ba8b87069f3e43751a0ecc34838a32a9826ed380865ac759df62fe9fd00a5b0275c10433395bb2c2b14b8d65978c447e6f47c4608bce0a50a0d3cdc7e1facfc74f095c0c0feae96701a6a8189c62fb2a68a7f953a7ed896e16e79e7fd8a0c6cd32cf385e9e13223128cd2a01790792e67e56e0e6e24620f769fff19dcf9083f963352fb2f527e9e1fb0ad65e97b641ead378a56557e622431b24aa30dee54a1de7bfd41e2c0de5bae9e38bfd8d71446478d35d5ba7