armeniancollege.in

Issued by R3

About this certificate

This digital certificate with serial number 03:65:3f:2b:bc:35:5f:75:20:56:5c:b6:ca:1b:70:7a:02:2f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=armeniancollege.in

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:3f:2b:bc:35:5f:75:20:56:5c:b6:ca:1b:70:7a:02:2f
Serial Number (int): 295789345304116532219986300993513878848047
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:58:c6:21:be:22:db:77:1b:9b:f5:ff:f5:ec:7e:ef:fc:4d:fd:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:17:4a:eb:ec:10:ec:d6:a8:12:8e:3e:fe:5d:ef:5b:8e:46:73:82
Fingerprint (sha256): 3d:ed:01:0c:ce:06:3a:bd:f5:4a:47:4e:75:46:88:5c:81:a2:91:04:6c:9d:e7:77:fa:8b:6b:42:7f:4f:67:46

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate armeniancollege.in

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for armeniancollege.in

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acereydark.com
*.archicad.com.au
*.armeniancollege.in
*.asianblog.org
*.c-projekt.org
*.chemistrylab.com.au
*.contractworldjob.com
*.crackstreamms.me
*.creditsesamelogin.com
*.digitalassetholdings.com.au
*.diwalidiyas.in
*.djtlewis.com
*.dsilyvoice.com
*.earthssky.org
*.edaers.com
*.elkgrovesf.org
*.enterpriseprise.com
*.fixerror2010.com
*.freepetregistery.com
*.fujikochan.org
*.getthatsong.org
*.havetheysteamdthatwizardgame.com
*.ippograte.org
*.kapitol.co
*.kraus.tv
*.larosajewellery.pl
*.lavalsante.com
*.llmovie.net
*.lojahori.com.br
*.lovely-roses.com
*.moviefloat.com
*.mycscg.com
*.myheathnetca.com
*.mylivecicket.in
*.navajo-coop.org
*.net-prints.com
*.pawzdoggiedaycare.com
*.paybyplateny.com
*.perfectbyarmrowlands.com
*.satoshidream.org
*.shirtsoff.com.au
*.shortr.pro
*.southwestwindandsolar.com
*.sportcards.com.au
*.tigerdropping.com
*.ustafied.com
*.wagesorks.com
*.wedicebet.com
*.whytehotelbletchingley.co.uk
*.www--twitter.com
acereydark.com
archicad.com.au
armeniancollege.in
asianblog.org
c-projekt.org
chemistrylab.com.au
contractworldjob.com
crackstreamms.me
creditsesamelogin.com
digitalassetholdings.com.au
diwalidiyas.in
djtlewis.com
dsilyvoice.com
earthssky.org
edaers.com
elkgrovesf.org
enterpriseprise.com
fixerror2010.com
freepetregistery.com
fujikochan.org
getthatsong.org
havetheysteamdthatwizardgame.com
ippograte.org
kapitol.co
kraus.tv
larosajewellery.pl
lavalsante.com
llmovie.net
lojahori.com.br
lovely-roses.com
moviefloat.com
mycscg.com
myheathnetca.com
mylivecicket.in
navajo-coop.org
net-prints.com
pawzdoggiedaycare.com
paybyplateny.com
perfectbyarmrowlands.com
satoshidream.org
shirtsoff.com.au
shortr.pro
southwestwindandsolar.com
sportcards.com.au
tigerdropping.com
ustafied.com
wagesorks.com
wedicebet.com
whytehotelbletchingley.co.uk
www--twitter.com

Other certificates including the domain name armeniancollege.in

(limited to 100 certificates)

Certificate

The complete raw certificate details for armeniancollege.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295789345304116532219986300993513878848047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 12:27:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 12:27:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'armeniancollege.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 996640414447422123927008165272004015558721864981284935874390370012671662261262288744651494290776290116390978563906363455923914429546415476494944825357060121895501838062556238259460125124296447982894572692569877118354088522078499881952685282475947815635609594876030991207964331700976568468312863736118994019414804597509806193686373269178127863621097590742910310170048225093391674315609629608522905192880501836960688637728662154804458470792086364869601944406190708169441181396558138131753359539771406384904588953941248190834359523671959544433647827372608428880791027822074838813553448022754364897056663305417738457909914786220607508065075560376302245211500359234173550447377516068593475298872207725309664808541593035569649426073232995216309686270646475173425927911227409861976619355660517304304890840016864610352965888800733835654308278096109597218397086616432231596219473012858298090574728724412721402454488971313889872072740168774684428690928390400813408955623436959202885749039809642878545263462701925835896444252590371125144228222274680307718330669813384440066230640014269503266156183887612733077083092015536227913088110014124816797712636586291558245392900898780927786535835548940988431803322349227070358106850243353382355499581713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7458c621be22db771b9bf5fff5ec7eeffc4dfd7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1908 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acereydark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.archicad.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armeniancollege.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asianblog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c-projekt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chemistrylab.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contractworldjob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crackstreamms.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditsesamelogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalassetholdings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diwalidiyas.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djtlewis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsilyvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earthssky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edaers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elkgrovesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enterpriseprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixerror2010.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freepetregistery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fujikochan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getthatsong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havetheysteamdthatwizardgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ippograte.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kapitol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kraus.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larosajewellery.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavalsante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llmovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lojahori.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovely-roses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviefloat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycscg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myheathnetca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylivecicket.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.navajo-coop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.net-prints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pawzdoggiedaycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paybyplateny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectbyarmrowlands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satoshidream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirtsoff.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shortr.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southwestwindandsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportcards.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tigerdropping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ustafied.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wagesorks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wedicebet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whytehotelbletchingley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www--twitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acereydark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archicad.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armeniancollege.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asianblog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-projekt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemistrylab.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contractworldjob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crackstreamms.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditsesamelogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalassetholdings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diwalidiyas.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djtlewis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsilyvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthssky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edaers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elkgrovesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixerror2010.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freepetregistery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fujikochan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getthatsong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havetheysteamdthatwizardgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ippograte.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraus.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larosajewellery.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavalsante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llmovie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojahori.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovely-roses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviefloat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycscg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myheathnetca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylivecicket.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navajo-coop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net-prints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawzdoggiedaycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paybyplateny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectbyarmrowlands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satoshidream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirtsoff.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortr.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwestwindandsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportcards.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigerdropping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustafied.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagesorks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedicebet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whytehotelbletchingley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www--twitter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b149ecb9c0000040300483046022100d5bfaa1d4cc5e7939fd1fb6479ac6601e71353c6314d81517818fe2d3c0a204b022100bd8fa54d2b79332ed5a2ab88f489deac82e405e70d46a630c86c60ad09c538d30076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b149ecb8e000004030047304502204739ca7711f035db89da296d2a5c796b33db76fdc00ab6d7e77f5663b0b5aec3022100fef388525d1ed50df798a2223a33d2ab3521013f7d362c7e9c19a95b155533e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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