ymcadive.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a7:83:0f:57:85:37:2c:81:de:ab:ec:24:33:63:2b:50:8e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ymcadive.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:83:0f:57:85:37:2c:81:de:ab:ec:24:33:63:2b:50:8e
Serial Number (int): 318338221598102221953681647227886566592654
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:3b:76:02:59:4f:50:a8:90:94:c2:91:7f:60:34:ee:f6:b5:09:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:7c:6d:9d:9d:41:dc:49:33:42:0a:84:96:e4:17:f7:9c:9b:11:e8
Fingerprint (sha256): 30:c4:e8:99:de:bc:78:7e:92:af:bc:4b:3b:20:52:20:20:c3:d2:01:c2:b4:dc:6b:80:da:7d:07:ae:e0:2e:c4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ymcadive.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ymcadive.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.30daygarbagetogardenchallenge.net
*.advancedlaser.com.au
*.baankaivalbeachfront.com
*.bestiz.co
*.biiblegateway.com
*.caribe-healthyfood.com
*.charrandom.com
*.constructify.com.au
*.copellauniversity.com
*.desereagles.com
*.drtohrlp.com
*.eastsidesex.com
*.ecosai.org
*.eildon.com.au
*.eyemedivisioncare.com
*.fullswnd.com
*.funnyfunnyfunnyfunny.com
*.happypillow.com.au
*.hcomic.me
*.heavenornit.net
*.hixel.net
*.hrcourses.com.au
*.jevergreentreeservices.com
*.jopor.me
*.jse.au
*.juniorski.pl
*.mafezzonibiciclette.com
*.marqueliacarpetcleaning.com
*.mattressirm.com
*.metoclopramid.de
*.notebox.com.au
*.ohmylocal.com.au
*.outdoorkitchen.net.au
*.paripartners.club
*.primygames.com
*.reuterss.com
*.rocketcitychemicals.com
*.shirtspce.com
*.spinamba18.com
*.suzuri.co
*.telcohealthcheck.com.au
*.thealbanyherald.com
*.unringabell.com
*.usperscriptions.com
*.vinniesfarmmarket.com
*.wakyourgameup.com
*.wisconsindot.com
*.wwwmedco.com
*.wwwtalis.com
*.ymcadive.com
30daygarbagetogardenchallenge.net
advancedlaser.com.au
baankaivalbeachfront.com
bestiz.co
biiblegateway.com
caribe-healthyfood.com
charrandom.com
constructify.com.au
copellauniversity.com
desereagles.com
drtohrlp.com
eastsidesex.com
ecosai.org
eildon.com.au
eyemedivisioncare.com
fullswnd.com
funnyfunnyfunnyfunny.com
happypillow.com.au
hcomic.me
heavenornit.net
hixel.net
hrcourses.com.au
jevergreentreeservices.com
jopor.me
jse.au
juniorski.pl
mafezzonibiciclette.com
marqueliacarpetcleaning.com
mattressirm.com
metoclopramid.de
notebox.com.au
ohmylocal.com.au
outdoorkitchen.net.au
paripartners.club
primygames.com
reuterss.com
rocketcitychemicals.com
shirtspce.com
spinamba18.com
suzuri.co
telcohealthcheck.com.au
thealbanyherald.com
unringabell.com
usperscriptions.com
vinniesfarmmarket.com
wakyourgameup.com
wisconsindot.com
wwwmedco.com
wwwtalis.com
ymcadive.com

Other certificates including the domain name ymcadive.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ymcadive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318338221598102221953681647227886566592654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 08:35:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 08:35:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ymcadive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 858117061799567702306668352303740915930582110911629894139128193458914273803835384285878615161541801516952844060684572782889203134019364806177700808029255647630053960899290019623550624391417159774140333957224112021328712758665859002886826673068615852272758749092867790776247923681040814111645403163326657065437917552324399612645913377318441126446973504243564278045163235693654534258692466243883207936276807222153079079148187173773311704909590317384404025284899586380755162206494348282704133063376218957128821405767889782260723243775487068759997105517924522209772791272465097047509927665203404985476300221297416107322682911218429164086571057511699393906773068813045308222204037765947053801592988775031038745328085011224808087815167262028061571963785090554911990318572277852615073484194275680642806068780304957040768252073281746742972954566084932877335703894885035578635208010710176090602426026434089200831329156953691709854512552879451710934917973597503080906253134819205498065513383751677426115268317637416281303729058094852394226557112758705609515518236275531463590042696792982358612213392985554039005954458788360353793454855580082620361057605840942113284107300777490485432403852717997069756492389006954113922677735793106261161841443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							263b7602594f50a89094c2917f6034eef6b50940
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1944 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.30daygarbagetogardenchallenge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advancedlaser.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baankaivalbeachfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestiz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biiblegateway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caribe-healthyfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charrandom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.constructify.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copellauniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desereagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drtohrlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastsidesex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecosai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eildon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyemedivisioncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullswnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funnyfunnyfunnyfunny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happypillow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hcomic.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heavenornit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hixel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrcourses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jevergreentreeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jopor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jse.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juniorski.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mafezzonibiciclette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marqueliacarpetcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mattressirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metoclopramid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notebox.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohmylocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outdoorkitchen.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paripartners.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primygames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reuterss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocketcitychemicals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirtspce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spinamba18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suzuri.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telcohealthcheck.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thealbanyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unringabell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usperscriptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinniesfarmmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wakyourgameup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wisconsindot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmedco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwtalis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymcadive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '30daygarbagetogardenchallenge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedlaser.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baankaivalbeachfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestiz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biiblegateway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caribe-healthyfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charrandom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constructify.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copellauniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desereagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtohrlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastsidesex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecosai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eildon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyemedivisioncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullswnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funnyfunnyfunnyfunny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happypillow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcomic.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heavenornit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hixel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrcourses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jevergreentreeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jopor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jse.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorski.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mafezzonibiciclette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marqueliacarpetcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattressirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metoclopramid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notebox.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohmylocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoorkitchen.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paripartners.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primygames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reuterss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketcitychemicals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirtspce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spinamba18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suzuri.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telcohealthcheck.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thealbanyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unringabell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usperscriptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinniesfarmmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakyourgameup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisconsindot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmedco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwtalis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymcadive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e605dbd44000004030047304502201bebd2df82476132461728451e8a4ce4ca2a645e2a15ad1867291a65aaedfcac0221009780623379b0de4809ccc19354509575bdc9ab4b1fc0b061ca8b84fff7e91cf2007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e605dbd4a0000040300473045022100bac26543e8102c03cb4d180ae32fe878d1da499415c1cfeba02e7fb5c1e33b60022010c3f06a57d7d1a87ac0aa85da64731462d897dc833342cf77d676f191a11790
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0034d1937eccc0d137f52c59a8ebae90c0871d04f053f03848e8a6dff025a132c23ca3586b7148e3318097feff0fd525465e8908ec16933516f3b3ff3bd43bed98aceb946251a06b5cc22cd4d48422b66b5a1c83c3ef8467f213218cbde566e9a6a4e208cb43b37689ce03d67f632f332d710ef1c00fbefb74593e3cc30c4041fcbc15c81d2ac33ae11df0abcbbd13fa08a3af05d9e233c384b524608fd27e5cfd4f003734652c062d2b1c8bc7808e021ceb43675c7cd1a904337ff9dcf66edad1e2d609a16bb5d86cf5a0be5ca3fcee5339afacbfd513aa0992f25c8979948aeb629cdb48064d0ff6a7ad691d2042db3c4aa64201c1ed747fcd2de567310b1602