ssl388458.cloudflaressl.com

Issued by COMODO Domain Validation Legacy Server CA 2

About this certificate

This digital certificate with serial number ad:84:a4:e5:9a:55:47:3c:3a:8e:b8:f1:52:ac:1a:ac was issued on by COMODO CA Limited.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs MUST NOT issue any new Subscriber certificates or Subordinate CA certificates using SHA-1 after 1 January 2016 (BRs: 7.1.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)

Certificate Subject

CN=ssl388458.cloudflaressl.com,OU=Domain Control Validated+OU=Legacy Multi-Domain SSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ad:84:a4:e5:9a:55:47:3c:3a:8e:b8:f1:52:ac:1a:ac
Serial Number (int): 230645170962305044506006308693088148140
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: fd:0a:c9:54:29:2e:b2:56:63:f2:60:49:eb:17:83:fb:f0:ec:aa:62
AuthorityKeyId: 99:8e:02:95:c5:1e:55:22:7b:87:70:8b:5e:1c:01:c2:76:c4:ae:e8

Fingerprint (sha1): 0d:3e:ef:1b:47:9b:c7:e7:87:9f:6c:ea:ac:39:ba:39:44:f3:f4:1d
Fingerprint (sha256): 3c:f5:eb:4c:10:89:89:ee:fe:53:29:30:7b:55:67:2a:52:a7:aa:2e:b3:bd:44:be:0a:4c:c1:b4:1a:89:2e:50

Issuing Certificate URL: http://crt.comodoca4.com/COMODODomainValidationLegacyServerCA2.crt

Revocation information

OCSP Server: http://ocsp.comodoca4.com
CRL Distribution Point: http://crl.comodoca4.com/COMODODomainValidationLegacyServerCA2.crl

Check the revocation status for certificate ssl388458.cloudflaressl.com

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl388458.cloudflaressl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl388458.cloudflaressl.com
*.agriculturemorethanever.ca
*.agricultureplusquejamais.ca
*.autopartsnetwork.com
*.bljumla.com
*.canadacarloans.com
*.fuoriuso.eu
*.harrietpaterson.com
*.intherabbithole.com
*.mashahir.net
*.phxlabs.ca
*.playdauntless.com
*.saaih.com
*.spotlight.com
*.weightloss.com.au
*.worldfiner.com
agriculturemorethanever.ca
agricultureplusquejamais.ca
autopartsnetwork.com
bljumla.com
canadacarloans.com
fuoriuso.eu
harrietpaterson.com
intherabbithole.com
mashahir.net
phxlabs.ca
playdauntless.com
saaih.com
spotlight.com
weightloss.com.au
worldfiner.com

Other certificates including the domain name cloudflaressl.com

(limited to 100 certificates)
ssl381797.cloudflaressl.com
sni32503.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni115750.cloudflaressl.com
sni.cloudflaressl.com
sni155855.cloudflaressl.com
sni59049.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni211154.cloudflaressl.com
sni.cloudflaressl.com
sni189810.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni856209.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni90611.cloudflaressl.com
sni.cloudflaressl.com
sni178904.cloudflaressl.com
sni26581.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni193995.cloudflaressl.com
sni44161.cloudflaressl.com
sni159804.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni146505.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni227751.cloudflaressl.com
sni240860.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni163960.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl829466.cloudflaressl.com
sni.cloudflaressl.com
sni44515.cloudflaressl.com
sni.cloudflaressl.com
sni226824.cloudflaressl.com
sni.cloudflaressl.com
sni238751.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni171982.cloudflaressl.com
sni66010.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni204563.cloudflaressl.com
sni147888.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni70031.cloudflaressl.com
sni59352.cloudflaressl.com
sni165754.cloudflaressl.com
sni.cloudflaressl.com
sni234389.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni188256.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni61492.cloudflaressl.com
sni.cloudflaressl.com
sni110040.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for ssl388458.cloudflaressl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1IVN6QE3P2qENSPxDE0
wJzy2KU4fbYLrFhl9EwNsAJy47WwiOKmnXLfOZR7ku6TdgZpkiFXWnzxeOL1Usgw
NNzsNPbJDYrUYegCkkedTULxTusrIXFoVfvHF05awP6jlLLKdhQGh+nHQDfwNKet
3o7QbLM0t1jyNrMuF63fbE4jzUuDWW2OAvhSlYSnfXDqQeTL/Qw/imzN943LDHp+
35CWSUjUDZNAC49prlMsl9Yg3BRgc6frKV2yw2zDloVXx/sahm7kNnKybsBm26K+
II+18NJceUZtOyqeD1k6/fK8pL7mx7kuB2+r/JJ5NxwQXS2o2GRyZOw4St1ccXqo
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 230645170962305044506006308693088148140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO Domain Validation Legacy Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Legacy Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl388458.cloudflaressl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23647039605491694919379259801074005655074680586197335455231279948489638524464071326287336867862325416218618945041499353761694363233270336914952710577977489736677503755028936887335077670595252126137077136339690839557616734016215295457289129475194290150141513888035693870888712295763917931642716757720107015047304488088906426243789607411543016738482837707635718962871279657632126728893187836655426370695741876998555282032009093699930650731219082924921856454132517925987763783901460232582143193856264283893537631159135553272691666954322804517918878272251166984636970699622875956527622163824047366250963384144810934446107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 998e0295c51e55227b87708b5e1c01c276c4aee8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd0ac954292eb25663f26049eb1783fbf0ecaa62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca4.com/COMODODomainValidationLegacyServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca4.com/COMODODomainValidationLegacyServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca4.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl388458.cloudflaressl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agriculturemorethanever.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agricultureplusquejamais.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autopartsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bljumla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canadacarloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuoriuso.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrietpaterson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intherabbithole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mashahir.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phxlabs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playdauntless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saaih.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weightloss.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldfiner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculturemorethanever.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agricultureplusquejamais.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autopartsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bljumla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadacarloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuoriuso.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrietpaterson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intherabbithole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mashahir.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phxlabs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playdauntless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saaih.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weightloss.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldfiner.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016618f9c84900000403004630440220232ebbbdf84570f6a298a3c94573219004d5f408d94e2127d583c4ea2db40dcd022057ffb43bc87ec052cc5a49b3ade393ac2e3b3b9e4a7d839b70fb12494272dcc5007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016618f9c640000004030047304502207dddd215bbd2ef4ea20fd34bfa37622f7cdd2d174b29eb178e01bd3306f055f402210089efe63929b8068bd48b74da713ca538f80e37521683ad2a338b1ee00a9c108e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00597fd6b380f4007bec4edd1d551801c97adc61ca2f3cae4d32bed48dd1b28a9e6a2bd76c07dcdd429cb56e888675580ecf20df3450fc7eb9f481f2a7871726ea9726b2e985e056c9ab630081a575218252350f1672f5fc1c10163b105f4dd06bdd5aa607f02ceecd8c9d02947d96c9a8ee57b03d2fa5bcc2c93c56764651aef224269108993bb5a5056351b3a7918700789b7b01586ec3c9f89391cb18d2762b059322f4332eaa5f1a65551427f67c73017fcac3eb4c333780631bedc4b3e3cb65b310458f8df4a7a416d869d1df17d81d718ba44602dd946af769b4fa470f4fd921e70a92c6e5522eb3d3d0afb6434307e63f476d681e178ede4d5e57504d64