oceantelephone.com

Issued by R3

About this certificate

This digital certificate with serial number 04:61:71:f6:fd:8b:13:8e:56:a3:1a:ee:d7:5b:22:27:00:35 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=oceantelephone.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:61:71:f6:fd:8b:13:8e:56:a3:1a:ee:d7:5b:22:27:00:35
Serial Number (int): 381608018529391309208818312184806599229493
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8d:9c:bd:cc:fa:7d:2c:f1:07:04:2c:5b:54:47:60:19:18:c1:d5:25
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8d:5d:47:5e:8b:da:01:da:22:36:36:39:f2:60:4c:66:19:b4:68:03
Fingerprint (sha256): 27:09:0f:7e:07:60:5b:8b:81:9f:61:6f:39:54:05:38:99:e0:ec:7c:ef:48:0d:82:dd:1f:ce:d9:9b:a8:14:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate oceantelephone.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oceantelephone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arabgeographic.com
australiaonlinejob.com
bestorganicrice.com
budapestlaw.org
businesspda.com
campuselectronic.com
cutandweld.com
developalgorithm.org
dubaiscreens.com
edinburghwealth.com
enabletransactions.com
freshgraduatejob.com
futurespacestation.com
giuh.com
hyperbolicgeometry.org
joblessyoung.com
keysphere.org
kosovoradio.com
legalmalaysia.com
lidarminings.com
literaturejamesjoyce.com
litigationfunds.org
mindcontrolledinterface.com
monacoauctions.org
monsterscreated.com
natureofnothing.org
negativewealth.com
netluxembourg.com
newstadiumplace.com
nightvisionengineering.com
oceantelephone.com
offshorecryptofund.com
offshoreelectronic.com
offshoregram.org
organicsprouted.com
personalvideogames.com
prelusion.org
printinghealing.com
publishingfund.com
renewablestate.com
rocketfueling.org
sovereignspa.com
stuttgartboerse.com
supplywater.org
tankwarfare.org
weekendpanama.com
www.arabgeographic.com
www.athensweekend.com
www.balidrama.com
www.berlinboerse.com
www.campuselectronic.com
www.commoditydash.com
www.cryptomaid.com
www.cutandweld.com
www.dubaioffshore.net
www.dubaiscreens.com
www.fundingvc.com
www.futurespacestation.com
www.groupeanglais.com
www.hyperbolicgeometry.org
www.interfactura.org
www.joblessyoung.com
www.keysphere.org
www.kosovoradio.com
www.legalmalaysia.com
www.lidarminings.com
www.literaturejamesjoyce.com
www.mindcontrolledinterface.com
www.monsterscreated.com
www.natureofnothing.org
www.negativewealth.com
www.netluxembourg.com
www.newstadiumplace.com
www.nightvisionengineering.com
www.oceantelephone.com
www.offshoreelectronic.com
www.offshorela.com
www.organicsprouted.com
www.personalvideogames.com
www.prelusion.org
www.publishingfund.com
www.renewablestate.com
www.rigoffshore.net
www.rocketfueling.org
www.thefutureofsolarenergy.com
www.thesubmarine.org
www.tokyoattorney.net
www.useofsolarenergy.com

Other certificates including the domain name oceantelephone.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for oceantelephone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VT2G2YOqe3YmwvCrs/y
twFmYWUSw149LpvsxqZXSK0lJBG/B3QoWHUzmi4XK/Hf+BBA2XCgu6QiSNyOBosF
ORc1IVhh7xQxdyLgIohH2OxAELGJS07jQzi406IgH9/XbNXDyKHXz5ILj8Ln/vFm
wvh0aS2+pSs5XlXOGMDHq5uL6I1YtqZyeeYb39seh/xpivnrnSXwAlzUpaOWmmQJ
LaEV5O3Mo0fqqKbipz3qaS6Hg+MWgVj0hW6PMzFWdjocRHasG6vJhRwixyKcqUDD
5162wpKaY/k2FbQPWAfwzysOPi3mh1JegKSpP46ON5ym2MstjIo9VFN756qdBzN5
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381608018529391309208818312184806599229493
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 11:35:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 11:35:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oceantelephone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28445514623280475044527731255762631536301533557442596024981347252977743016318488290898447440044673330972831623937814228277113808946886519800976012965661288343933851719128556433190258467496317523224761614130817339965521964902679456818459327155431631793651745655424468706598653260750957731858570872758531319534472448898676141155079328476029178430288983130953988637194486807043733487614396207113116810968930414827465864645305593747530884653030147114474511111103293911417220814609830501883133559194682204292924722993058145069256629670396150021010027408456846709304868664616559088774416138836593695637253977995952663001441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d9cbdccfa7d2cf107042c5b5447601918c1d525
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1942 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australiaonlinejob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestorganicrice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budapestlaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesspda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campuselectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutandweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developalgorithm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaiscreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edinburghwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enabletransactions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshgraduatejob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurespacestation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giuh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyperbolicgeometry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joblessyoung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysphere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosovoradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalmalaysia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lidarminings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literaturejamesjoyce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litigationfunds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindcontrolledinterface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monacoauctions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterscreated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natureofnothing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negativewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netluxembourg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstadiumplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightvisionengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceantelephone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorecryptofund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreelectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoregram.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicsprouted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalvideogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prelusion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printinghealing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publishingfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewablestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketfueling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuttgartboerse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplywater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankwarfare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekendpanama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arabgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athensweekend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balidrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinboerse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campuselectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commoditydash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptomaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cutandweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaioffshore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaiscreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundingvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurespacestation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groupeanglais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyperbolicgeometry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interfactura.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joblessyoung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keysphere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kosovoradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalmalaysia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lidarminings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literaturejamesjoyce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindcontrolledinterface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterscreated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natureofnothing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.negativewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netluxembourg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newstadiumplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nightvisionengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceantelephone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoreelectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicsprouted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personalvideogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prelusion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publishingfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renewablestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rigoffshore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocketfueling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefutureofsolarenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesubmarine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokyoattorney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.useofsolarenergy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c8c600e24000004030046304402203153556bed4a60743b34fd9ed33c4ca948c59f134eb21fd22938dc8efd3502ad02207bc97cfa957030e7d15d98297474a1d41f0d2b27321e509844765923b0812e2100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c8c600eaf0000040300483046022100b231e0fd80679329b7882b407f4f8e0e1c922f0de5decab381aa2cb277b78c86022100ce1d7d9d020552a711e95c61a38088ec8ed074356a34244527bc92058bd57a4e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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