pennavemeats.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e9:2d:e0:20:57:d8:40:ba:cf:2d:fb:09:e9:64:41:1f:18 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pennavemeats.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:2d:e0:20:57:d8:40:ba:cf:2d:fb:09:e9:64:41:1f:18
Serial Number (int): 340683628278162919413657716086013201293080
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:e0:92:b7:28:41:7a:bc:99:e8:46:15:f5:6c:b9:75:21:7c:43:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:51:70:d8:cf:50:9d:3f:38:48:6b:9e:7d:13:7c:92:cd:77:cd:bd
Fingerprint (sha256): 41:e7:32:39:81:00:0b:2a:8d:0d:c1:89:ec:1d:18:4d:e2:0e:d2:e1:1e:5d:65:57:bd:f5:f1:21:ad:a7:e5:37

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pennavemeats.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pennavemeats.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.88321.com
*.airtme.com
*.amanullah.com
*.anike.com
*.bibili.co
*.cederbaum.com
*.circuitboards.com.au
*.citibakn.com
*.derivacion.com
*.doggz.com
*.eedx.org
*.estrategiafinanciera.com
*.gentlyusedfurnitureantiques.net
*.glassandscreenshop.com
*.hongxiuge1999.com
*.hotrld.com
*.icicoach.net
*.indyrental.com
*.ipaleo.com
*.legalizedocs.com
*.lendungtree.com
*.licindiain.com
*.locosporelasado.com
*.motorrend.com
*.mygreatlaes.org
*.mygreatlakees.org
*.mygreatlakess.org
*.mygreatlkes.org
*.mygreatllakes.org
*.mygrratlakes.org
*.myygreatlakes.org
*.ognya.com
*.overstocktochina.com
*.pdflibr.co
*.pennavemeats.com
*.pokiesnet11.com
*.readyrefresh.co
*.safetydashboard.com.au
*.sattefarm.com
*.slimmerz.com
*.swedishtouchmassage.com
*.thebrodys.com
*.thedessertguys.com
*.thisjusthappened.com
*.thonglingerie.com
*.ticktfly.com
*.tiitlemax.com
*.tredcafe.com
*.vintagetheater.com
*.vlijmen.com
88321.com
airtme.com
amanullah.com
anike.com
bibili.co
cederbaum.com
circuitboards.com.au
citibakn.com
derivacion.com
doggz.com
eedx.org
estrategiafinanciera.com
gentlyusedfurnitureantiques.net
glassandscreenshop.com
hongxiuge1999.com
hotrld.com
icicoach.net
indyrental.com
ipaleo.com
legalizedocs.com
lendungtree.com
licindiain.com
locosporelasado.com
motorrend.com
mygreatlaes.org
mygreatlakees.org
mygreatlakess.org
mygreatlkes.org
mygreatllakes.org
mygrratlakes.org
myygreatlakes.org
ognya.com
overstocktochina.com
pdflibr.co
pennavemeats.com
pokiesnet11.com
readyrefresh.co
safetydashboard.com.au
sattefarm.com
slimmerz.com
swedishtouchmassage.com
thebrodys.com
thedessertguys.com
thisjusthappened.com
thonglingerie.com
ticktfly.com
tiitlemax.com
tredcafe.com
vintagetheater.com
vlijmen.com

Other certificates including the domain name pennavemeats.com

(limited to 100 certificates)
pennavemeats.com
pennavemeats.com
pennavemeats.com
pennavemeats.com
pennavemeats.com

Certificate

The complete raw certificate details for pennavemeats.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340683628278162919413657716086013201293080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 08:36:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 08:36:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pennavemeats.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822502563926532414078305392946453964209553037073348358699928954114751877095890044061387708407499234610041188961476664645812434389846066585081281221172942771769532280228862619541139814210750039386742938033233669843017568724585075131946050237145541913889887955630564314692393036339809651052716551426463180412222787813226448693363583704351571644396355517836248958441874785814898794162998899072840108737450659267971143004258515058583983240225403218013205907929064113553202501856843971758509586165975214722332967796346477075425240185589780375239130025307975231123811606967119474853664340016442799534797579573785760938941867912281933678798426693339825393644191712589416727964284569263677951901738606353785134732944452418782775268580976217225295994957636390068054873725877924827974128894158537637405736679594849000351840770758908683734364977146202372446187520138447556724162473447543040896948913074241240406425891670654556650797559781370346937354984298833437477098031873578453088269453152424199669918187786300304883470828470215410988140691409082494562287536968828473701695764574284847185522176258403778653902626276193856571549702736023011573384319153425017655377285911129132206376280739267580434679396488627694901902279080465734213779812521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fee092b728417abc99e84615f56cb975217c43f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1796 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.88321.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airtme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amanullah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bibili.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cederbaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.circuitboards.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citibakn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derivacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doggz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eedx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estrategiafinanciera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gentlyusedfurnitureantiques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glassandscreenshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hongxiuge1999.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotrld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icicoach.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indyrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipaleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legalizedocs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lendungtree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.licindiain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locosporelasado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motorrend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mygreatlaes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mygreatlakees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mygreatlakess.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mygreatlkes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mygreatllakes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mygrratlakes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myygreatlakes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ognya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overstocktochina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdflibr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pennavemeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokiesnet11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.readyrefresh.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safetydashboard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sattefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slimmerz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swedishtouchmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebrodys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedessertguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thisjusthappened.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thonglingerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticktfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiitlemax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tredcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vintagetheater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vlijmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '88321.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airtme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amanullah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibili.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cederbaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circuitboards.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citibakn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derivacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doggz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estrategiafinanciera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gentlyusedfurnitureantiques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glassandscreenshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongxiuge1999.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotrld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icicoach.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indyrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipaleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalizedocs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendungtree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licindiain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locosporelasado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorrend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygreatlaes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygreatlakees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygreatlakess.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygreatlkes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygreatllakes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygrratlakes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myygreatlakes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ognya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overstocktochina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdflibr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennavemeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokiesnet11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readyrefresh.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetydashboard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sattefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slimmerz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swedishtouchmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebrodys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedessertguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisjusthappened.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thonglingerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticktfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiitlemax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tredcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagetheater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlijmen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bcd30bba60000040300483046022100ec826caa07c807d491539065da0bbda8c21522b1340acfb52b1e4e508279d64a022100db3f1e992b2d6b4287a7c575801b5ff7ecd11840e767810d15245a1698df75dc00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bcd30bbf10000040300483046022100b8c85d0089e9d8fbece80b8691b16a902a9a85417b1e44adc2c3ad17e2cbd4fc0221009642408946d6452d0ae46b73adf79664fcc9f9f27187d37797ef86a44dfc36a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0097e2ed15b293f790d965cb43da6d56851f3f82be63c82dacb90c6b5570d70ed86868faa38bf13a4298370ed0fa50a1d06164dc33232ecb1171d77a226f82c41c36663a62ba8f1da9c25d870629778ee917ac35a5fd80369e26222b98ef1ca43c5694dfdba932d000f114cebd6e81e3beb5d50a8d51cec5ddd7d19977f4ebf59b413d1856fff17cc8a485c54509177e90c7b132bb1c7b8297162c9b419b27717f711de050c2c100c1d71db2fd76d48c72a1e8a0a726cff0a24a5d5e2c7818e833ad9947a3bdec1c0091bb585bd5dfcf58c7c37732f5ac2e3a4dbbd28efd278eab87a7c43464b4c74932674f19f224f76b3d61fa066ffa5f91689e0c7662c4d5e2