fishingreports.com.au

Issued by R3

About this certificate

This digital certificate with serial number 04:be:b6:a3:0f:49:6a:23:87:03:9e:18:59:4a:2e:57:8f:4c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fishingreports.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:be:b6:a3:0f:49:6a:23:87:03:9e:18:59:4a:2e:57:8f:4c
Serial Number (int): 413345559591692738789656026243938519584588
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c1:0a:16:0e:f9:d4:60:e4:32:ca:94:d9:94:51:76:2c:94:bf:1a:ae
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e9:b5:df:bb:f0:b7:36:af:3d:88:fe:43:a3:fe:93:17:3d:49:25:9f
Fingerprint (sha256): 2b:9f:7c:5f:2e:b5:9f:f8:49:7f:32:59:6d:5d:42:cd:06:45:e0:a0:6f:37:95:e5:43:22:c6:0e:c2:32:1b:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fishingreports.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fishingreports.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.702-storage.com
*.advanceanerica.net
*.almahmoud.com
*.cardboardbike.com
*.cardinalhealthhr.com
*.corel-tipp-clips.de
*.daiilywire.com
*.dietadetox.com
*.domaine-alexandre-bain.com
*.economerienda.com
*.familyphoto.com.au
*.fishingreports.com.au
*.freemymobile.com
*.hangingtents.com
*.hap.com.au
*.httpstaobao.com
*.intagam.com
*.invisiblewig.com
*.jclaughlin.com
*.kingsubsandover.com
*.konyha.com
*.levlusa.com
*.lplusarts.com
*.maingau-ernergie.de
*.meritrust.org
*.minecraftworlds.com
*.mytiys.de
*.opelocasion.es
*.pacificgroomingco.com
*.pikoletkokorec.com
*.producer.com.au
*.qingjiyou.com
*.renewablematerial.com
*.rubteen.com
*.salsassouthwestgrill.com
*.servicearizona.co
*.silence.in
*.sqlmagazine.net
*.susansummer.com
*.taberu-nasukougen.com
*.the-maven.co
*.thepennyhorder.com
*.tichyseinblicke.de
*.ultralightconstruction.com
*.usabbva.com
*.usaleans.org
*.waelseaiby.com
*.wwgmx.de
*.wwwmycarepack.com
*.yahiko.com
702-storage.com
advanceanerica.net
almahmoud.com
cardboardbike.com
cardinalhealthhr.com
corel-tipp-clips.de
daiilywire.com
dietadetox.com
domaine-alexandre-bain.com
economerienda.com
familyphoto.com.au
fishingreports.com.au
freemymobile.com
hangingtents.com
hap.com.au
httpstaobao.com
intagam.com
invisiblewig.com
jclaughlin.com
kingsubsandover.com
konyha.com
levlusa.com
lplusarts.com
maingau-ernergie.de
meritrust.org
minecraftworlds.com
mytiys.de
opelocasion.es
pacificgroomingco.com
pikoletkokorec.com
producer.com.au
qingjiyou.com
renewablematerial.com
rubteen.com
salsassouthwestgrill.com
servicearizona.co
silence.in
sqlmagazine.net
susansummer.com
taberu-nasukougen.com
the-maven.co
thepennyhorder.com
tichyseinblicke.de
ultralightconstruction.com
usabbva.com
usaleans.org
waelseaiby.com
wwgmx.de
wwwmycarepack.com
yahiko.com

Other certificates including the domain name fishingreports.com.au

(limited to 100 certificates)
webkeywordsdvd.com
stocktwis.com
fishingreports.com.au
rtp.eu
gloalindustrial.com
fishingreports.com.au
stocktwis.com
billger-fluege.de
fishingreports.com.au
jclaughlin.com
fishingreports.com.au
qle.nl
wsvtv.com
jclaughlin.com

Certificate

The complete raw certificate details for fishingreports.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413345559591692738789656026243938519584588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 17:31:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 17:31:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fishingreports.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 715407740773548946192364206916011911674525985247418987098016016118929642416634340673571523376240367095954146238591329952262076245334652364633590007804360024010610280700387415217402610268071909002146549634118728525852856951250585412336583562313969510558952106074993450004120971101004198847467091993058381611166524119036827114509964950824512851852158643318606901688679063976055364504033668180749471152153413068829090563324628708378546491199652439711383285714138952118211879931368958712089145816818086174921967822833784520153034552796452146513333313465107286912522065486791310509816904756043994988946565956691625854752511559721466612823856567816899831592288749207766516998963788598307076300116007904202034907983201553029401353180459573464056102532363180984352480252897783649956911827995741809113249414492953759342071055615469274102153428199070082023562290707682059978100624358896585820275827810602269361212809451792986774159440597496971237175826447840229663959266850661632757206573566126004022598700679786611817810556716704644637474412417402916538148139743747226859472262204363998549434788836921341089374652454388313676322328977953800163136754632506083667314410547999478687348662065613464139724013648541035401639328173072120221619681451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c10a160ef9d460e432ca94d99451762c94bf1aae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1872 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.702-storage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advanceanerica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almahmoud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardboardbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardinalhealthhr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corel-tipp-clips.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daiilywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dietadetox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domaine-alexandre-bain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.economerienda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familyphoto.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fishingreports.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freemymobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hangingtents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.httpstaobao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intagam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invisiblewig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jclaughlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingsubsandover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konyha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.levlusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lplusarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maingau-ernergie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meritrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minecraftworlds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytiys.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opelocasion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificgroomingco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pikoletkokorec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.producer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qingjiyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renewablematerial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salsassouthwestgrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicearizona.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silence.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sqlmagazine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.susansummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taberu-nasukougen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-maven.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepennyhorder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tichyseinblicke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultralightconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usabbva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usaleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waelseaiby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwgmx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmycarepack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '702-storage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceanerica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almahmoud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardboardbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalhealthhr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corel-tipp-clips.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daiilywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dietadetox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domaine-alexandre-bain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economerienda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familyphoto.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishingreports.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemymobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hangingtents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httpstaobao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intagam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invisiblewig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jclaughlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsubsandover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konyha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levlusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lplusarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maingau-ernergie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meritrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecraftworlds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytiys.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opelocasion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificgroomingco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikoletkokorec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'producer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qingjiyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewablematerial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salsassouthwestgrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicearizona.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silence.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqlmagazine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susansummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taberu-nasukougen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-maven.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepennyhorder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tichyseinblicke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultralightconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usabbva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waelseaiby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwgmx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmycarepack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahiko.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d04181ac200000403004730450220492d86023ca96fafb7b49d5a9ad9b2b41d2df9c761cd72d44eedb5332e24a2750221009ecf6835ba7bcdcdc5b7876d13370dd66cfbb3cec8b36c4ebe19cd3f7b5197cc007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d04181af00000040300473045022100b372852440ef5ff0468d219e7e34011d8ba391f7a607b97029ebc8559b3ff53302205693cb8e99a6cb559bbb7dd053a84ba7ec59688f5bcdedda85f733ee4bb4c97d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0063721a35bed8f951fd4ec3ee20dd29973719dcd032544caa301a6536dd4c8d2d0c74675e7b76729d08fa5aee7c6e618631bad4a1e78ce97f48ff7cb617d87ee15f137caa3877fd494d47fc8c669cbcf183d291ebc02df457c30864353e94d6978781e09c3bd430c15f21470393d59370e8ca95ea6e248d1504127dfc97259a3d11660a8b79d88b243b97029db2dfd9342fa5aae06d3d8be848bbc46b69eecdf72db5fb8a6d3bcb5ddc7ddd294b5d6c3574158e12ace5e7b9576a50fbd849b73e9a3cb07581f6f9ac8dd757b115e8648a8902f7702a4ae1c015a2f43255dff86efa7ed5d2c339c6d0cf433b4d22552e9b3aeaf6149f1862c8bd95b40c07d5ee1b