westafriocacoffee.com

Issued by R3

About this certificate

This digital certificate with serial number 04:81:7a:65:23:46:a7:22:f8:40:68:37:5b:2a:20:66:a8:a2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=westafriocacoffee.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:81:7a:65:23:46:a7:22:f8:40:68:37:5b:2a:20:66:a8:a2
Serial Number (int): 392508260012792553903615657347412629301410
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fb:49:00:f8:a7:76:db:1c:9b:59:78:f1:1b:b9:6e:1d:8b:c8:f9:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:52:19:b3:6a:f7:40:0a:55:ff:c0:67:b5:ed:2d:a3:b7:bc:c2:0a
Fingerprint (sha256): 41:85:be:3b:60:27:a0:92:3e:76:35:01:c6:57:66:8b:41:e3:c3:54:3d:d5:c7:69:6b:29:e0:48:69:8a:74:22

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate westafriocacoffee.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for westafriocacoffee.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alaskabroadband.com
architectsdesigner.org
architectsdesigners.org
bermudaoffshore.org
boutiquehotelcuba.com
boutiquehoteldoha.com
boutiquehotelsantamonica.com
btcanon.org
causalrelationship.org
cincinnatillc.com
cryptofinanz.org
deepoceancapital.org
deepoceansurvey.org
ethanon.org
fijicamera.com
freight16.com
ghanacafe.org
ghanacoffee.org
ghanaorganiccafe.com
ghanaorganiccoffee.com
guidetanzania.com
harborauthorities.com
introduce.com
legalmalpracticeusa.com
livetv10.com
livetv6.com
musictonga.com
oceanenergypower.org
offshoreanguilla.com
offshorebogota.com
offshorecryptogmbh.org
offshorecryptotrader.org
offshorecuba.com
offshoredominica.com
offshoreguinea.com
oilfielddevelopment.org
panamajob.com
perucrypto.org
privatebankworld.com
redefineleadership.org
saratogajob.com
suissefinancialservices.com
suissekredit.org
togocoffee.org
tongamusic.com
tradefinancepost.com
tvtanzania.com
universityofpanama.com
westafriocacoffee.com
wetradecrypto.org
www.alaskabroadband.com
www.architectsdesigner.org
www.architectsdesigners.org
www.australiaonlinejob.com
www.bermudaoffshore.org
www.boutiquehotelcuba.com
www.boutiquehotelsantamonica.com
www.btcanon.org
www.causalrelationship.org
www.cincinnatillc.com
www.crudeoilproduction.org
www.cryptofinanz.org
www.deepoceancapital.org
www.ethanon.org
www.fijicamera.com
www.freshgraduatejob.com
www.ghanacafe.org
www.ghanacoffee.org
www.ghanaorganiccoffee.com
www.guidetanzania.com
www.legalmalpracticeusa.com
www.livetv10.com
www.livetv6.com
www.musictonga.com
www.oceanenergypower.org
www.offshoreanguilla.com
www.offshorebogota.com
www.offshorecryptogmbh.org
www.offshorecryptoltd.org
www.offshorecryptotrader.org
www.offshorecuba.com
www.offshoredominica.com
www.offshoreguinea.com
www.offshoresamoa.com
www.oilfielddevelopment.org
www.panamajob.com
www.parislegal.org
www.privatebankworld.com
www.saratogajob.com
www.sovereignspa.com
www.suissefinancialservices.com
www.suissekredit.org
www.togocoffee.org
www.tongamusic.com
www.tradefinancepost.com
www.tvtanzania.com
www.universityofpanama.com
www.weekendpanama.com
www.westafriocacoffee.com
www.wetradecrypto.org

Other certificates including the domain name westafriocacoffee.com

(limited to 100 certificates)
www.offshorecryptoltd.org
www.offshorecryptoltd.org
www.offshorecryptoltd.org
www.offshorecryptoltd.org
westafriocacoffee.com
www.offshorecryptoltd.org
www.offshorecryptoltd.org
www.offshorecryptoltd.org
www.universityofpanama.com
westafriocacoffee.com
www.offshorecryptoltd.org
westafriocacoffee.com
www.offshorecryptoltd.org

Certificate

The complete raw certificate details for westafriocacoffee.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9b3H9drAnrZEXWSlKdRU
U+hvDiUZaaQuujpAAteMHemaGvU1UbcWAT4xlElbIHgiPr44HzURVTu+ewqMreMp
BxfkNQAnbigL/7BaQn5RdALLvbVSlQQLOvjy43s4neaqS+mEooiuh/dlBAlPr9Uk
kPnnkOKmyQNn1Kv5cZb/oUTGpcU3Y+x3luUlOisucNuqj9eJDMZu9lBM5gAtIB+0
2hmFRjwQtVqzmqgnRL8wlnAijIizYw6jS678HBHq2p1JouftrhEAuC3EyPOtgX1/
qJS2/p/xGWUutigOnqFqQnfTMimht0uV2kbmXDdFkvpH+diE1ItFqPnk/zDi8XGX
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392508260012792553903615657347412629301410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 11:33:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 11:33:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'westafriocacoffee.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31021969262667322853931183194509697180183812914423597138863320533695258449624760085213180523620121255825781499054227261054933522911802849603207113486020172863125798346898038475899810142685332546290647804506836676376521754579617441381404384960102709071569306192749938100271068521372283647918169574281616280177778511799643469041646492202817624588658587151335519733827993966262883444719894206531583789456422405229589769405404761948499412588843675963087954095334980589518031193476114987246637829774498357481992881957915117789318408448863700648135780656327201641070988459287042943481393263289685717178241492395256957736881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb4900f8a776db1c9b5978f11bb96e1d8bc8f9cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2224 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskabroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architectsdesigner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architectsdesigners.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudaoffshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutiquehotelcuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutiquehoteldoha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutiquehotelsantamonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btcanon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'causalrelationship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincinnatillc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptofinanz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepoceancapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepoceansurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethanon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fijicamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freight16.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghanacafe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghanacoffee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghanaorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghanaorganiccoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidetanzania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harborauthorities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'introduce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalmalpracticeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livetv10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livetv6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musictonga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanenergypower.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreanguilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorebogota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorecryptogmbh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorecryptotrader.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorecuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoredominica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreguinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilfielddevelopment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panamajob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perucrypto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redefineleadership.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratogajob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suissefinancialservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suissekredit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togocoffee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tongamusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradefinancepost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvtanzania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universityofpanama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westafriocacoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetradecrypto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alaskabroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.architectsdesigner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.architectsdesigners.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australiaonlinejob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bermudaoffshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boutiquehotelcuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boutiquehotelsantamonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btcanon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.causalrelationship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cincinnatillc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crudeoilproduction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptofinanz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deepoceancapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethanon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fijicamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freshgraduatejob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghanacafe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghanacoffee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghanaorganiccoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidetanzania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalmalpracticeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livetv10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livetv6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musictonga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanenergypower.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoreanguilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorebogota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorecryptogmbh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorecryptoltd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorecryptotrader.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorecuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoredominica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoreguinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoresamoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oilfielddevelopment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panamajob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parislegal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saratogajob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suissefinancialservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suissekredit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togocoffee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tongamusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradefinancepost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvtanzania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityofpanama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weekendpanama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westafriocacoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wetradecrypto.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d64a8befe000004030047304502206e02bdc9d4ffa3554a262b52b6d87ed7b3ec3187da4b64272438f689e58d5f1d022100b989622f3ee1b8e5af683a5abc5b5588c73486f1e69c5bdfec1969f62bfdfaf200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d64a8bfca0000040300473045022100accd8dedd338b72d6d09684e48e9b37a6bc08f203871c89e7ebb2bac93f3d5160220114e8a3da9f47337958efadbbc8b33103d86042cc572a029d455771c19cb3478
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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