selectedgroups.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b5:2c:02:c2:a7:fd:ed:2b:28:21:03:a2:f3:d8:69:e5:e2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=selectedgroups.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:2c:02:c2:a7:fd:ed:2b:28:21:03:a2:f3:d8:69:e5:e2
Serial Number (int): 322986466572476007869817790068322890016226
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:45:9f:79:dc:78:d4:09:6b:dd:46:88:db:e5:e4:f6:ea:0f:9b:72
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:f3:41:e6:70:11:ad:5b:75:57:6a:4a:c1:9b:79:ea:e6:9a:ae:a2
Fingerprint (sha256): 3c:fc:c7:40:14:47:6c:c5:d2:a9:72:90:6a:6a:4c:c0:17:8e:05:c9:da:ae:7c:95:c0:5e:5b:2d:06:8d:39:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate selectedgroups.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for selectedgroups.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dperformances.com
3dpolice.com
affocapital.com
affodigital.com
architectsworld.net
baliherbalist.org
blockchainacademi.com
blockchainag.net
blockchaingrowers.com
cartoonbusiness.com
countycricket.com
cricketheadlines.com
cryptoag.net
deutschelending.com
dominicaweather.com
dutch-dictionary.com
electricheater.org
fijihistory.com
furgusonpolice.com
gabrielgarciamarquez.net
genesanddna.org
irishlending.com
lagrandemanipulation.net
lapenthouse.com
lawsucre.com
liaisonofficer.com
liberiamoney.com
listentowhistleblowers.com
malihello.com
newoffshorelending.com
nigeriaassets.org
oshawareal.com
phaseconjugation.net
procurementbusiness.com
releasestrategy.com
romabudapest.com
sciencelending.com
selectedgroups.com
shanghailending.com
shaoxingtechnology.com
shipholding.com
sportovninoviny.com
sub-sea-crane.com
sumofnumbers.com
totalisolation.net
unnouveau.com
wholesale-kingdom.com
writtenbelow.com
www.24costarica.com
www.3dpolice.com
www.affocapital.com
www.affodigital.com
www.antiguasale.com
www.architectsworld.net
www.athensattractions.com
www.auctioncalender.org
www.blockchainacademi.com
www.blockchainag.net
www.blockchaincleaners.com
www.cartoonbusiness.com
www.caymancryptoexchange.com
www.cgieffects.com
www.chineseafricandevfunds.com
www.cooptions.org
www.coralspringsweather.com
www.countycricket.com
www.cryptoag.net
www.dantedivinecomedy.com
www.deutschelending.com
www.dominicaweather.com
www.dutch-dictionary.com
www.equitysector.com
www.fijihistory.com
www.furgusonpolice.com
www.gabrielgarciamarquez.net
www.genesanddna.org
www.irelandmoney.com
www.irishlending.com
www.lagrandemanipulation.net
www.lapenthouse.com
www.lawcayenne.com
www.listentowhistleblowers.com
www.malihello.com
www.marineholdingtanks.com
www.motivationspeakers.org
www.newoffshorelending.com
www.oshawareal.com
www.phaseconjugation.net
www.procurementbusiness.com
www.releasestrategy.com
www.royalbitcoinexchange.com
www.santafenewspaper.com
www.sciencelending.com
www.selectedgroups.com
www.seychellessport.com
www.shaoxingtechnology.com
www.sumofnumbers.com
www.totalisolation.net
www.worldweak.com
zaragozaweather.com

Other certificates including the domain name selectedgroups.com

(limited to 100 certificates)
www.cashinvestigation.net
www.equitysector.com
www.stardustrevelation.net
www.affocapital.com
nomoreemploymentapps.com
www.lagrandemanipulation.net
www.royalbitcoinexchange.com
www.motivationspeakers.org
props.com
3dperformances.com
selectedgroups.com
www.lapenthouse.com
www.beforelaunch.org
www.cgieffects.com
shanghailending.com
selectedgroups.com
wildspeculation.net
muzikgroups.com
3dperformances.com
www.malihello.com
www.financeaviation.net
cryptograds.org
www.globalsolarinstallation.net
www.lapenthouse.com
www.mexiconewsapps.com
listentowhistleblowers.com
www.assassinationgroups.com
asteriskapps.com
onboardnavigation.net
www.onlinepsyops.com
wildspeculation.net
www.genesanddna.org
shanghailending.com
www.procurementbusiness.com
environmentregulation.net
www.lapenthouse.com
www.onlinepsyops.com
www.oceancrops.com
www.phaseconjugation.net
www.procurementbusiness.com
www.cryptoag.net
www.shaleinvestigation.net
www.irelandmoney.com
topmultinationalgroups.com
www.onlinepsyops.com
www.financeaviation.net
writtenbelow.com
3dperformances.com
deutschelending.com
www.muzikgroups.com
www.lapenthouse.com
totalisolation.net
www.santafenewspaper.com
www.murderinvestigation.net
www.totalisolation.net
situationgroups.com
fijihistory.com
beijingtops.com
www.contactwhois.org
www.bitunemployed.com
www.stardustrevelation.net
www.selectedgroups.com
www.lapenthouse.com
www.cgieffects.com
www.shaoxingtechnology.com
www.theatregroups.com
www.dantedivinecomedy.com
www.assassinationgroups.com
onboardnavigation.net

Certificate

The complete raw certificate details for selectedgroups.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCTxBFr/qGzsh9dH3kXv
kqa6ip6wZlkSawAugTphwHdHmiKsJeGcKCQ6BU28miBPMh2tWLLtQ4PP1uVyaXyO
ZCM7skb2C29C2/gnp8a+2Pr7zpx4snHxrFKTGsm/BG+GYvZjMo/l5k79mlGX8fj3
AvbRuj+RExpv0JPQ7VWT1BnroJ7ExorEs6cYWgMcElARkE0XrAQKCZdt+tPym1xe
1pWyKeGpRbB1zoOJETyQtBxw17Tp4rvynHZE30KeCwPY9xgp+hGD9RV96KX7ceEO
Tyhny7ectZ6nTm30EOrsVRZqRdxCj8m1fuGKrBA/z9MxGL/Vfot1jJ2Z3YHpbuXA
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322986466572476007869817790068322890016226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-12 11:32:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-12 11:32:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'selectedgroups.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22236158193158140199710573073564879336258007297693007295269774446665507893758599948609601063152206030579584371199642158165323663014485107446323186584867497466991534939174587590567520805172245075131522539577625006758172491060295340798551338998761585791932746003774190648989175249126226105145889270015673227653436060403251581206415518844091794566457120479415349437586891908602324523358274583293454620809214509199609651258095755961988315411929233526563292018553933178342205305625836469384614211818329797389741030189473677782550757224485166127861633117006610434994487388459728368321695166217378875165696776096680874721461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40459f79dc78d4096bdd4688dbe5e4f6ea0f9b72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2219 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dperformances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affocapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architectsworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baliherbalist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainacademi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchaingrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countycricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketheadlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptoag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominicaweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dutch-dictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fijihistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furgusonpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabrielgarciamarquez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesanddna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irishlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagrandemanipulation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawsucre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liaisonofficer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberiamoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listentowhistleblowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malihello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newoffshorelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriaassets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshawareal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phaseconjugation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procurementbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releasestrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romabudapest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selectedgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanghailending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaoxingtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportovninoviny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub-sea-crane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumofnumbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalisolation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unnouveau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale-kingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writtenbelow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.24costarica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affocapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antiguasale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.architectsworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athensattractions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auctioncalender.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainacademi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchaincleaners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartoonbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caymancryptoexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgieffects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chineseafricandevfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooptions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coralspringsweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countycricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptoag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dantedivinecomedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dominicaweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dutch-dictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equitysector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fijihistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.furgusonpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gabrielgarciamarquez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesanddna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irelandmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irishlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagrandemanipulation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawcayenne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listentowhistleblowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malihello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marineholdingtanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motivationspeakers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newoffshorelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oshawareal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phaseconjugation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.procurementbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.releasestrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalbitcoinexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santafenewspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sciencelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selectedgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seychellessport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaoxingtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumofnumbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totalisolation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldweak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaragozaweather.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170396341570000040300483046022100bba093f3388838c72b4c51a09e87805f121ce4608e966a5c97d9e1e7c30615cd0221009d767f4bc20abdddd8b25bcdfacb138c9405db8593d5e248e63ac70efddf45d4007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001703963416d0000040300483046022100e2f04ff96ecef3f4496814093f876936489bc317251eba730754c943aeb5a559022100aa3cd4b86faedc943ac43b2e04ce09719bea2b97afafdeea2a8061af4c064eb6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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