www.commondecency.io

Issued by R3

About this certificate

This digital certificate with serial number 04:cb:2d:d9:1e:d4:0d:f8:7d:42:7a:a8:98:5b:d9:02:ca:37 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.commondecency.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cb:2d:d9:1e:d4:0d:f8:7d:42:7a:a8:98:5b:d9:02:ca:37
Serial Number (int): 417587406825493100214263933905732704062007
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a0:04:78:29:56:6f:ef:95:a6:9a:89:8b:7b:97:c9:5a:01:e4:bd:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 32:27:02:2e:43:47:3b:58:91:04:82:0e:d3:96:3f:95:8a:40:a5:35
Fingerprint (sha256): 27:e6:6a:f0:26:81:5a:6e:bb:3a:68:bf:d3:ba:f5:bf:e4:06:78:b8:2b:b1:54:92:4c:5c:bd:05:e7:bf:4b:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.commondecency.io

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.commondecency.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

21hungariandances.org
balkanorchestra.org
bestofbach.org
bestofbeethoven.org
blackstudies.io
blackstudies.tv
bushire.com
businessschoolonline.net
cinemabelfast.com
cinemainternet.com
commondecency.io
filmdirectors.io
filmdistributor.org
firstwaltz.net
fourthwaltz.com
fourthwaltz.net
greatestwaltzes.net
greatestwaltzesofalltime.net
gypsydances.org
gypsysongs.org
gypsyviolin.org
howmanymadesterilewithoutconsent.com
howmanymadesterilewithoutconsent.net
inperformanceatthewhitehouse.net
inperformanceatthewhitehouse.tv
jamaicaairports.com
jamaicachat.com
jamaicacountry.com
jamaicadiscounts.com
jamaicav.com
lifefrankfurt.com
lifemexicocity.com
lifepanamacity.com
localjethire.com
madesterilewithoutconsent.com
madesterilewithoutconsent.net
minesnew.com
miningact.com
miningbody.com
mininginternet.com
petropanama.io
privatetravelhire.com
secondwaltz.net
strausswaltz.com
talesfromtheviennawoodswaltz.com
thirdwaltz.com
thirdwaltz.net
uaecarhire.com
wawooo.org
webdubois.io
www.21hungariandances.org
www.balkanorchestra.org
www.bestofbach.org
www.bestofbeethoven.org
www.blackstudies.io
www.blackstudies.tv
www.bushire.com
www.businessschoolonline.net
www.cinemabelfast.com
www.cinemainternet.com
www.commondecency.io
www.filmdirectors.io
www.filmdistributor.org
www.firstwaltz.net
www.fourthwaltz.com
www.fourthwaltz.net
www.greatestwaltzes.net
www.greatestwaltzesofalltime.net
www.gypsydances.org
www.gypsyviolin.org
www.howmanymadesterilewithoutconsent.com
www.howmanymadesterilewithoutconsent.net
www.inperformanceatthewhitehouse.net
www.inperformanceatthewhitehouse.tv
www.jamaicachat.com
www.jamaicacountry.com
www.jamaicadiscounts.com
www.jamaicasecrets.com
www.jamaicav.com
www.lifefrankfurt.com
www.lifemexicocity.com
www.lifepanamacity.com
www.localjethire.com
www.madesterilewithoutconsent.com
www.madesterilewithoutconsent.net
www.minesnew.com
www.miningact.com
www.miningbody.com
www.mininginternet.com
www.musicalroyalty.com
www.privatetravelhire.com
www.repairafloat.com
www.secondwaltz.net
www.strausswaltz.com
www.talesfromtheviennawoodswaltz.com
www.thirdwaltz.com
www.thirdwaltz.net
www.uaecarhire.com
www.wawooo.org
www.webdubois.io

Other certificates including the domain name commondecency.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.commondecency.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VEz2ICjxxDlH1Av6r+w
7HvAtIoKLAuwQ5jbU6OSPlnD4eeACnoSF3bgVGDDkd86bgk29sESMhonB7u3n5ai
lmhGWmvDcKbfE9hiakuj+phwiq6P4G1ziWhW+yyraEh7P6iuLoD7jNstzl2wWvzZ
2k7rNrYtNUUG7/BLoPD41YOiK0UHcnQnQo71y1sib/zm5ZCUwrcDIj0oQF6DnlLK
Awk5FsfZejeuVJTPIiHtzci7+zi6rtiK2MjPmr3UfWBDe9DSgFusyyeuiApvq+Mp
Q+O79jjG00Hla5JskOBw5xMj026uDwYui3nfnlLpTkllJaEFRRKpwfViuXN4Lwv/
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417587406825493100214263933905732704062007
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 10:39:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 10:39:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.commondecency.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26928801413927267419585473249340487973038182692232384541137164567095337510681073399415481467253561013477307190536197823787917666219231770585744263322005535165487656502060979366077222052681901894184188696781337443728493420432766031479919535183093342967426801994531395526034348529684463582606399630786608177702470170505453348818946851917883777152131139089505526814283716950080386166228786282317994913957276052380808284900332366949291302204757080631671154759308453275299863898338371753902133186955822225287426876445803391755583680970231245184908693245953270579338790716478674823747510901199293207322057216691826454167537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0047829566fef95a69a898b7b97c95a01e4bd18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '21hungariandances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balkanorchestra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestofbach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestofbeethoven.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackstudies.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackstudies.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessschoolonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemabelfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemainternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commondecency.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmdirectors.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmdistributor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstwaltz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fourthwaltz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fourthwaltz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatestwaltzes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatestwaltzesofalltime.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gypsydances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gypsysongs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gypsyviolin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howmanymadesterilewithoutconsent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howmanymadesterilewithoutconsent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inperformanceatthewhitehouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inperformanceatthewhitehouse.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamaicaairports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamaicachat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamaicacountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamaicadiscounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamaicav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifefrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifemexicocity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifepanamacity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localjethire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madesterilewithoutconsent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madesterilewithoutconsent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minesnew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miningact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miningbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mininginternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petropanama.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatetravelhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondwaltz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strausswaltz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talesfromtheviennawoodswaltz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdwaltz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdwaltz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uaecarhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wawooo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdubois.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.21hungariandances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balkanorchestra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestofbach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestofbeethoven.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackstudies.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackstudies.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bushire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businessschoolonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinemabelfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinemainternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commondecency.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmdirectors.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmdistributor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstwaltz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fourthwaltz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fourthwaltz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatestwaltzes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatestwaltzesofalltime.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gypsydances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gypsyviolin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howmanymadesterilewithoutconsent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howmanymadesterilewithoutconsent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inperformanceatthewhitehouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inperformanceatthewhitehouse.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamaicachat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamaicacountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamaicadiscounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamaicasecrets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamaicav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifefrankfurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifemexicocity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifepanamacity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localjethire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madesterilewithoutconsent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madesterilewithoutconsent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minesnew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miningact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miningbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mininginternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musicalroyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatetravelhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repairafloat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secondwaltz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strausswaltz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talesfromtheviennawoodswaltz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thirdwaltz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thirdwaltz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uaecarhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wawooo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdubois.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894f0c386d0000040300473045022100baad31ad995390b8f7daeef2f04abaf2b9715218f8c0c3931525f774cdea56e802207602d10bbb0680d6c745b877b65ebbc9b167674ed50ec55564439e9a16d2053a007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001894f0c385e000004030046304402206446031244040a557d65578822edb46cf73ed7d275d7c15c0e0fd2e7661de361022073575c0601e1bff3e56a34359eb37bf5dcc7a7b64cdbff821b9d06abdc7b1ae6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0026781752204b0291915ed96ea63021c8d42058a626c04e53485665c61ff1391c24e4e3ded6df56cf75ff161fc13e4282033728acc360b3b1c073eddd0a87a3e7e3a28ee9257a4b6f3fee4db1dc9cd2d0eeea6e3142486cdd5ec47f356b6c1874e18992be2f1525a45348592697947da0d0eb5d3253f7e332c7dfe561e76c3a12d1b2176a97319e0a09e8c2ae74b594aab69844e0f1393c630e6e38e8368010b0549489869500607dec5e388371b1a3c8d7f1e004cc0acd716e8522e277994964d9cb09d9e8b33d8908e4d111fb0749fe299f241ab3d340d1673cc3b63074c55c08f107b6f897b12338bc51a64daa9b98a421d4751543fc85892d7eb753b21e64