californiabookstore.com

Issued by R3

About this certificate

This digital certificate with serial number 03:bb:5e:c9:6a:75:8d:a0:02:32:32:7d:02:3d:8d:cf:8a:32 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=californiabookstore.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:5e:c9:6a:75:8d:a0:02:32:32:7d:02:3d:8d:cf:8a:32
Serial Number (int): 325095653652017524026061691258940741880370
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:81:3a:6d:09:2d:f3:fb:63:e3:af:9f:c3:5d:c8:08:28:cf:f9:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 28:4e:eb:2b:5d:08:44:35:e2:20:c4:4d:10:98:51:18:fc:00:e9:b7
Fingerprint (sha256): 3e:d7:35:e8:e1:4c:b2:13:ef:21:b7:e3:c0:f4:15:eb:17:71:69:90:b4:75:02:43:3a:0a:6d:2b:f0:8e:af:01

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate californiabookstore.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for californiabookstore.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abudhabiglobalmarkets.com
africainsurance.org
africanamericandirectory.net
africaoiltrading.org
alittleprincess.org
amokoaffo.org
asiadevelopmentbank.org
automotiveengineeringschool.com
bankparadise.com
beethovendirectory.net
buyinggoldonline.org
cacaofarmers.org
cairogrand.com
californiabookstore.com
chinaoiltrader.org
chinaoiltrading.org
deepspacefarm.org
dresdenclinic.com
europeoffshore.org
europeoiltrading.org
fargojewelry.com
fibonaccinumber.com
glasgowtrade.com
hotelsasiapacific.com
japdata.com
kazakhstanland.com
kurdishpower.org
latincinema.org
manilaoffshore.com
marinecontractor.org
medinagrand.com
myafricanhistory.com
newavenueschool.com
offshorealaska.com
oil-spilling.com
oilsalesafrica.com
operagrand.org
policefire.com
portprojects.com
radioaffo.org
romanticalexandria.com
snowwhiteschool.com
sofialuxury.com
surgeryoffshore.com
tokyodrama.com
uzbekculture.com
wealthcreated.com
wn365.com
www.affomusic.org
www.africainsurance.org
www.africanamericandirectory.net
www.africaoiltrading.org
www.allenjewelry.com
www.asiadevelopmentbank.org
www.automotiveengineeringschool.com
www.beethovendirectory.net
www.bollywoodgreats.com
www.buyinggoldonline.org
www.chinaoiltrade.org
www.chinaoiltrader.org
www.chinaoiltrading.org
www.conference22.com
www.demolitionvessel.org
www.dresdenclinic.com
www.energychief.org
www.europeoiltrading.org
www.fibonaccinumber.com
www.freedrawingbooks.org
www.hotelsasiapacific.com
www.japdata.com
www.kazakhstanland.com
www.kazakhstanrepublic.com
www.kyotosquare.com
www.latincinema.org
www.manilaoffshore.com
www.marinecontractor.org
www.medinagrand.com
www.myafricanhistory.com
www.namibialuxury.com
www.newavenueschool.com
www.officerussia.com
www.oilsalesafrica.com
www.operagrand.org
www.policefire.com
www.radioaffo.org
www.romanticalexandria.com
www.saintlucialuxury.com
www.singapurbusiness.com
www.snowwhiteschool.com
www.surgeryoffshore.com
www.surveysouthafrica.com
www.wn365.com
zeroemissionsvehicles.org

Other certificates including the domain name californiabookstore.com

(limited to 100 certificates)
www.rocknrecordstore.com
www.demolitionvessel.org
www.hyderabadcapital.com
www.gmofeedstore.com
nightamerican.com
europabookstore.com
beethovendirectory.net
abidjanculture.com
www.rawfoodhabits.com
www.underseaoperations.com
thebeatlesmusicstore.com
www.saintpetersburgculture.com
www.myafricanhistory.com
helsinkistore.com
www.hotelsasiapacific.com
romanticalexandria.com
artistsdirectory.net
surgeryoffshore.com
www.gmofeedstore.com
www.saintpetersburgculture.com
manilaoffshore.com
www.disusedgoldstore.com
www.energychief.org
medinagrand.com
japdata.com
www.felonsjob.com
www.abidjanculture.com
fibonaccinumber.com
antoniovivaldistore.com
www.kazakhstanrepublic.com
www.aerospacedirectory.net
enterartist.com
insurancediesel.com
bitcoinfinancialgroupe.com
californiabookstore.com
marinefishstore.com
footyfactory.net
www.orientoffshore.com
www.uglyducklingstore.com
www.marinefishstore.com
manilaoffshore.com
www.basetheory.net
wealthcreated.com
abidjanculture.com
www.underseaoperations.com
www.europeprivate.com
www.singapurbusiness.com
www.namibialuxury.com
callingchromestore.com
reggaedirectory.net
www.wn365.com
www.wn365.com
www.folkbandstore.com
www.newsongspost.com
www.defencepolicy.net
alittleprincess.org
notforprofitproduction.net
thebeatlesmusicstore.com
www.premierapartment.com
www.saintpetersburgculture.com
www.rnbrecordstore.com
www.wnshoppingstore.com
malaysiapower.com
abidjanculture.com
www.negativeterritory.net
www.reykjavikclub.com
www.scientificreduction.net
www.cubabookstore.com
salmonindustry.org
deutschefitness.com
manilaoffshore.com
surgeryoffshore.com
babylonianculture.com
www.worldindigenous.org
www.entrepreneursadvisory.net
philippinestreasurestore.com
www.scrapdredgers.com
romanticalexandria.com
kazakhexpo.com
www.folkbandstore.com
bestmarinestore.com
surgeryoffshore.com
surgeryoffshore.com
www.helsinkistore.com
www.infraredstore.com
www.chinaoiltrading.org
www.dubaienvironment.com
www.energychief.org
automotiveengineeringschool.com
surgeryoffshore.com
www.californiabookstore.com
www.latincinema.org
www.rawfoodhabits.com
illnessdirectory.net
bitcoinfinancialgroupe.com
www.tulsabookstore.com
www.librettist.com
www.folkbandstore.com
africainsurance.org
www.gccimmigration.com

Certificate

The complete raw certificate details for californiabookstore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1dwsgEG3n6jsemKrNFh
qKNYgI81S+dXuNIQ7SvDg5sl5+JN4WI1QWHd46pxOvUzzhSO2T6pHnIaTUhXL4fV
tHmPTzxFJzp3JonYnnbLE054/9l50BDCqS9PlI6RM/5FuOV4hdNBY+4dzVTREuZw
y6YqCDNKOBDKWZxUucLe1nqnevQkSzJmxYBYQX2t9NLC11SDSH+mzglptscmeJ+I
tBm/vaeEkyFCi2eZBaiKttyXKBXclS6tAIQZEooHAsqUqJ56Nss61H/AmpCiPVci
QFE9rUhYtDMANOYQ+8vztAE/HENFTho2PnlPeGAQqygAvd5cmIT4Lv0vqzzr7Kw+
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325095653652017524026061691258940741880370
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 11:32:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 11:32:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'californiabookstore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20115008867218823985001400571579705515980822450246992628928230241722753612345910351977065252957132215980336880747027938616141148085870381927867141097319414133930013534580306345369625254900001280527573147801041385644332286932065990514064454187180585446821346153344094023706884177997865116630632228739755433809294964623938920325294941320119933932194129305184623933900466937642139709734960274331495115638881778289621189815702810168653666685082363484405436612657960589356398606076169729352663625100520679119719761088225041706977633774884740714610625965507990393685058267685197411546924332553209036910913343020098338438813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17813a6d092df3fb63e3af9fc35dc80828cff981
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2061 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abudhabiglobalmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africainsurance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanamericandirectory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africaoiltrading.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alittleprincess.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amokoaffo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiadevelopmentbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automotiveengineeringschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankparadise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beethovendirectory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyinggoldonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cacaofarmers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cairogrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiabookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaoiltrader.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaoiltrading.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepspacefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dresdenclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europeoffshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europeoiltrading.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fargojewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibonaccinumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasgowtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelsasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazakhstanland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurdishpower.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latincinema.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manilaoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinecontractor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medinagrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myafricanhistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newavenueschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorealaska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oil-spilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilsalesafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operagrand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioaffo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanticalexandria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowwhiteschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sofialuxury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surgeryoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokyodrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzbekculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthcreated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wn365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affomusic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africainsurance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africanamericandirectory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africaoiltrading.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allenjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asiadevelopmentbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automotiveengineeringschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beethovendirectory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bollywoodgreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyinggoldonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaoiltrade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaoiltrader.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaoiltrading.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conference22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demolitionvessel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dresdenclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energychief.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europeoiltrading.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibonaccinumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedrawingbooks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelsasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.japdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kazakhstanland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kazakhstanrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kyotosquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latincinema.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manilaoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marinecontractor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medinagrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myafricanhistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.namibialuxury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newavenueschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.officerussia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oilsalesafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.operagrand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radioaffo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romanticalexandria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintlucialuxury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singapurbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowwhiteschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surgeryoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surveysouthafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wn365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeroemissionsvehicles.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d45c1922e0000040300473045022100f6c205205546278dfc389b744d887ddfe0ddc50dac2156bdf8239a0a1fb4b16f022062953ade4d138d9a0391734c4b7cb66b511ffea5339e2ab5a572fffc167f624d0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d45c193d9000004030046304402203d5c159b49608087e02c3001fba3318fe31596e2a144b901914310432833f42602204282b1753013e2c9e17b7a78bc7f1014cac890a4cdc396ed32d851f5f27f1805
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001a1d9d2046f6ef69a71b54e90a6018cf2cd4e23c5960026b45917b1bdcfafae478932098aedb458761a0bcb38a85a068f6f8a3c86d1fe8c36c4dfe2219eb69c747730478d079c9a32740bfd9a00f0c86bdae62031d57970770b7817f39fdb58ec7716df68dfc2830549e6ec0f53ef953d0d830a9707de7ba47d1c02d46f1eb2703a481c8d55530678c4835a390f1945c92a7b24b9f5fd6f2b0e7296d773a8205fcb6235fdefc2ab79852f35a10198e71866fe7b067dea599079d1818f7ddfe7dfe94214fb886d4d31b2ac759580e427e68a76b2c104b48de42f183f8209e8abb33c65256d2936db7e5a08ec3bf6b6b6617034a82557ea20080f62113f920cc7b