www.cgieffects.com

Issued by R3

About this certificate

This digital certificate with serial number 03:cd:c8:34:19:79:f2:c5:6a:64:77:0c:69:1f:5d:2a:f8:f0 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.cgieffects.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:cd:c8:34:19:79:f2:c5:6a:64:77:0c:69:1f:5d:2a:f8:f0
Serial Number (int): 331360859129388733724186013003581582145776
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:89:e2:5e:7c:f7:ae:0a:c1:1c:86:7e:eb:aa:39:8c:72:3e:b0:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2d:c2:a4:85:69:87:d6:0a:0e:50:1a:d4:b7:65:de:73:7b:29:8f:87
Fingerprint (sha256): 3b:20:e3:06:97:e9:76:0b:c8:04:73:9e:41:79:98:81:43:c0:1f:e8:5a:15:6b:87:6c:b4:7d:6c:bc:dc:4a:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.cgieffects.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cgieffects.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dperformances.com
3dpolice.com
affocapital.com
affodigital.com
architectsworld.net
baliherbalist.org
blockchainacademi.com
blockchainag.net
blockchaingrowers.com
cartoonbusiness.com
countycricket.com
cricketheadlines.com
cryptoag.net
deutschelending.com
dominicaweather.com
dutch-dictionary.com
fijihistory.com
gabrielgarciamarquez.net
irishlending.com
lagrandemanipulation.net
lapenthouse.com
lawsucre.com
liaisonofficer.com
liberiamoney.com
listentowhistleblowers.com
malihello.com
netjobsworld.com
newoffshorelending.com
nigeriaassets.org
oshawareal.com
privatebankingworld.com
procurementbusiness.com
releasestrategy.com
romabudapest.com
sciencelending.com
selectedgroups.com
shanghailending.com
shaoxingtechnology.com
shipholding.com
sportovninoviny.com
sumofnumbers.com
totalisolation.net
unnouveau.com
wholesale-kingdom.com
writtenbelow.com
www.24costarica.com
www.3dpolice.com
www.affocapital.com
www.affodigital.com
www.architectsworld.net
www.athensattractions.com
www.blockchainacademi.com
www.blockchainag.net
www.cartoonbusiness.com
www.caymancryptoexchange.com
www.cgieffects.com
www.chineseafricandevfunds.com
www.cooptions.org
www.coralspringsweather.com
www.countycricket.com
www.dantedivinecomedy.com
www.deutschelending.com
www.dominicaweather.com
www.dutch-dictionary.com
www.equitysector.com
www.fijihistory.com
www.gabrielgarciamarquez.net
www.irelandmoney.com
www.irishlending.com
www.lagrandemanipulation.net
www.lapenthouse.com
www.lawcayenne.com
www.listentowhistleblowers.com
www.malihello.com
www.marineholdingtanks.com
www.motivationspeakers.org
www.newoffshorelending.com
www.oshawareal.com
www.pacificgeo.org
www.privatebankingworld.com
www.procurementbusiness.com
www.releasestrategy.com
www.royalbitcoinexchange.com
www.santafenewspaper.com
www.sciencelending.com
www.selectedgroups.com
www.seychellessport.com
www.shaoxingtechnology.com
www.sumofnumbers.com
www.totalisolation.net
www.worldweak.com
zaragozaweather.com

Other certificates including the domain name cgieffects.com

(limited to 100 certificates)
www.cashinvestigation.net
seawardcontacts.com
www.freeviewnews.com
opensourceimpacts.com
www.equitysector.com
www.stardustrevelation.net
www.commerceprojects.com
dubaibreakingnews.com
www.affocapital.com
www.biologiquedefinition.net
balletcardigan.com
balletcardigan.com
www.detroitacts.com
dubaigrowers.com
omahagrowers.com
www.lagrandemanipulation.net
www.amazingintuition.net
www.royalbitcoinexchange.com
www.motivationspeakers.org
www.underseaminingprojects.com
opensourceimpacts.com
3dperformances.com
selectedgroups.com
www.derivativescontracts.com
www.lapenthouse.com
balletcardigan.com
tampaprojects.com
www.balletandbaseball.com
www.beforelaunch.org
www.cgieffects.com
shanghailending.com
global-debt.com
selectedgroups.com
wildspeculation.net
www.marinesupport.org
3dperformances.com
www.tokyocontracts.com
www.santamonicaprojects.com
www.global-debt.com
jerseyfinance.net
alexvogel.org
www.detroitacts.com
www.malihello.com
www.detroitacts.com
www.unionacts.com
www.financeaviation.net
oilcontracts.com
bombayacts.com
www.marinecontracts.com
www.secretpatent.com
www.marinesupport.org
www.globalsolarinstallation.net
www.lapenthouse.com
listentowhistleblowers.com
www.commerceprojects.com
911demolition.net
onboardnavigation.net
colombiaprojects.com
www.internationalrecognition.net
wildspeculation.net
www.dubaibreakingnews.com
www.genesanddna.org
www.global-debt.com
shanghailending.com
www.procurementbusiness.com
environmentregulation.net
dubaibreakingnews.com
www.lapenthouse.com
www.commerceprojects.com
omahagrowers.com
dubaiflying.com
africaedition.net
www.phaseconjugation.net
www.procurementbusiness.com
www.cryptoag.net
www.shaleinvestigation.net
www.irelandmoney.com
philippinesgoldmines.com
cgieffects.com
architecturaldemolition.net
www.attracts.com
www.willcollect.com
wtcdemolition.net
www.financeaviation.net
www.toweringprojects.com
www.dubaiorganicgrowers.com
www.formingcontacts.com
writtenbelow.com
balletcardigan.com
3dperformances.com
www.detroitacts.com
alexvogel.org
deutschelending.com
erosionbreakwaters.org
www.commerceprojects.com
definerights.com
onlineassassination.com
www.marketintervention.net
abegoldstein.com
www.lapenthouse.com

Certificate

The complete raw certificate details for www.cgieffects.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjDHRAfU6q89Ikhm6dA9
NDDZfrToa2j5ZZHso3SMPfveroERLsAaAVonR0wXrClHzzbFCyrKe5epbsL7Nt0Y
l+YW4TUFf7jedxW48h8PQVpbV2jRb1VPsxlYNGlTOJgqrKwK61raax/xpt0FPX5c
/qSfgp/PwDkUV+97crvpf5G1tUQITAOk767DH1aozBCvnkmyK/ExbQExDgcF69pe
g3g3ubdZv21JHkuNKNCKjJ0zyF/uVy9KIajR45ezGjRTw2H4NuACuPJ1PWZocJuF
JlmrAhncS6ae/HzpZQNg4UqzvYGSZfIWipwdvg0/7dsp3TzGSWZliJFSAMu1OLut
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331360859129388733724186013003581582145776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 10:44:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 10:44:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cgieffects.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25524191119703392246221525255280060894453353986679516376398501056960447129633695888937620205231643526837844521641693325470242948124676926786047142389993274454018451128422552228417967686843758389767617643927411385746466371824745229173639244121930556537675412993984465286510093349435092194239813486579138088740234809611268278973973617445748233280489807764258581632006566369776184444746646527256016569404412212550105934465473390028601709776270258677597586658382880903265870893949535439511060996681162560184760260155073991966785730028753122445705324336547742700727826923697286141546603747132583021280453979751210544770343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a889e25e7cf7ae0ac11c867eebaa398c723eb0bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2050 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dperformances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affocapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architectsworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baliherbalist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainacademi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchaingrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countycricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketheadlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptoag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominicaweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dutch-dictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fijihistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabrielgarciamarquez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irishlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagrandemanipulation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawsucre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liaisonofficer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberiamoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listentowhistleblowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malihello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netjobsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newoffshorelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriaassets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshawareal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankingworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procurementbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releasestrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romabudapest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selectedgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanghailending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaoxingtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportovninoviny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumofnumbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalisolation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unnouveau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale-kingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writtenbelow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.24costarica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affocapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.architectsworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athensattractions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainacademi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartoonbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caymancryptoexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgieffects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chineseafricandevfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooptions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coralspringsweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countycricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dantedivinecomedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dominicaweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dutch-dictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equitysector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fijihistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gabrielgarciamarquez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irelandmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irishlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagrandemanipulation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawcayenne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listentowhistleblowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malihello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marineholdingtanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motivationspeakers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newoffshorelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oshawareal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacificgeo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankingworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.procurementbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.releasestrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalbitcoinexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santafenewspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sciencelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selectedgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seychellessport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaoxingtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumofnumbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totalisolation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldweak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaragozaweather.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f813815840000040300473045022100a1f4c690d9836cdbccf0f0090304c7860d019b264477a1654465151ac38c8981022059a32e1f17cab5bffef6d2bfaecff6c2d2c1fea2d98bdfbf47a644584e23f22c007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f8138158000000403004630440220134287984b47c4e63a5b0e84806a66eb8cee13f2870d2b7d128264d42610f146022079327bb6de26577e94ede1f4f15624fb5730be2caece2cc700e41623d1e9d6d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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