gemaling.ca

Issued by R10

About this certificate

This digital certificate with serial number 04:54:54:ce:ca:ac:04:f8:94:52:40:3b:2c:87:fb:13:4f:3e was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gemaling.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:54:54:ce:ca:ac:04:f8:94:52:40:3b:2c:87:fb:13:4f:3e
Serial Number (int): 377145591423874130969395404442207364796222
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a8:ff:57:07:5a:a7:20:0b:a4:b8:d8:1d:09:85:04:fc:f9:b2:96:5c
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): a8:99:05:77:65:e6:24:2a:63:f8:64:c0:67:5c:99:20:e0:9a:ed:eb
Fingerprint (sha256): 50:c6:f8:78:92:48:6c:8f:10:28:67:4c:b1:05:95:ac:62:92:a1:fb:34:f1:f3:2e:ab:4d:9b:8c:61:06:47:9a

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate gemaling.ca

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gemaling.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actuant.asia
americaneaglemeatgrinder.com
annuncincontri.com
arbitrage.ag
awesomeleadpages.com
bambooremovalguy.org
bancaidee.com
bathrobebillionaire.com
bestrestaurantsinsa.com
bradentonroofrenewal.com
buildingelectrification.com
casinoloan.co.uk
catcannabis.com
citizensforwestlakeland.com
clayclarkstowergarden.com
coloradocountyhomes.com
conferenceids.com
cvhealth.com
dartapparel.com
datingsitesinuk.com
dealarbitrage.com
decorumastutefashion.org
deedrah.com
derouter.com
digital-music.com
dyvergtech.com
eringee.media
establishjustice.com
findlower.com
fitters.com
food4vip.com
foreseeablerisk.com
franklinadams.com
fusiondiagnostic.com
fwwomanmag.com
gemaling.ca
georgespatton.com
hallsburg.com
happyeveryday.ca
harbitrage.com
hardenburgh.com
hempapron.com
hemppolicies.com
homeschoolvocationaltraining.com
hvacleesburg.com
infinityweddingrings.com
jadedragoncasino.com
kxtra.org
lauranda.com
leadore.com
lexcerpts.org
lgbtq2s.com
lovewell.com
magnetspheres.com
montegrotto.com
nationalhomeschoolconference.com
newagentcareers.com
nft.ambaalamps.com
oakautomate.com
ofbanking.com
ojaiimages.com
omphalocele.com
partialteeth.com
peorialawyer.com
peptidefoods.com
platelickers.com
plumerville.com
pokerdynamics.com
ppolgroup.com
prideclassroom.org
prompttrading.org
prorvrepair.com
rencontresgratuites.ch
retiredbabyboomers.com
rijnstraat40-2.nl
rodolfobuonocore.com
royalschnauzers.com
roysgate.com
rxsugarworldwideleader.com
sadoctors.org
sanantoniovirtualopenhouses.com
school-1.com
skiprides.com
stefanmolyneux.org
sukanyayojana.com
summers4coroner.com
suspicionnation.com
the-equalizer.com
thetexaswoman.com
totalinfo.uk
tvthree.co.za
waringstown.com
watermarkstables.com
why.bible
www.radialturbine.com
www.resumecourses.com
xn--cgj.com
yeshuaismessiah.com
zealfam.com

Other certificates including the domain name gemaling.ca

(limited to 100 certificates)
gemaling.ca
gemaling.ca
gemaling.ca
gemaling.ca
gemaling.ca
gemaling.ca
gemaling.ca
bestsugar.com.gemaling.ca
gemaling.ca
cloutgoblin.net.gemaling.ca
gemaling.ca

Certificate

The complete raw certificate details for gemaling.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW9wzKHUrqfIMVWvewan
AMVIhqLP2IMbJBqueArIbTvJQoaIz0vAlZ4R7qT0J38bHMssjtspLPVICnDA4QZV
F4gWFurP5G/89oSso6XNRieGLa3z8bOkMh6YYQNGXzWDAMM3y6X6U0LB/R3SD41V
nOsOSnCnFIyu861qWWzivk+C/i9XFulXmeWN4Y+NRD/MZ+OTGsQkYw06ny+Qgmk0
1zDD/NF4hgf+Ro6QqBvUJEIT6BXsKxaWRUbjPGzb6u9Wu0FZ8lE0pPUITpbfURAK
RWWC+fNbl+P9YeNoe/aZTHO0fKr3I/GorQebY/AcbZ/wuOv8u3OigfLmsai5RAoR
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377145591423874130969395404442207364796222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 18:33:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-04 18:33:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gemaling.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23409039837787411962894608024990151770061022773294650620107401474543818040679174260365281293240087288673807106915733345194820086173528885875718466184135453219387123285655095207740565301280149350204795570443618123570655461398881193147475431539601421728507399412622565211978774415357682802184053736086581282458818590616199723577809283481661821292054395179307320401244428496432256352261378219540350089855759488549699256836727044844853378799614784408865109470306573272625230773047738388901640036366164194279339963658598456471498181516783393892443907124086701928424522300250679165308629737496121068811073948777138505781549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8ff57075aa7200ba4b8d81d098504fcf9b2965c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1883 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actuant.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americaneaglemeatgrinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annuncincontri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awesomeleadpages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bambooremovalguy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancaidee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathrobebillionaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestrestaurantsinsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradentonroofrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildingelectrification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinoloan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catcannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensforwestlakeland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clayclarkstowergarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradocountyhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conferenceids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dartapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datingsitesinuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decorumastutefashion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deedrah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derouter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyvergtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eringee.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'establishjustice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findlower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreseeablerisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklinadams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusiondiagnostic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwwomanmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemaling.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgespatton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happyeveryday.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardenburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempapron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemppolicies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolvocationaltraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacleesburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infinityweddingrings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jadedragoncasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kxtra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lauranda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexcerpts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtq2s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovewell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnetspheres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montegrotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalhomeschoolconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newagentcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nft.ambaalamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakautomate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojaiimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omphalocele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partialteeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peorialawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peptidefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platelickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plumerville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokerdynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppolgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prideclassroom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prompttrading.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prorvrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontresgratuites.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retiredbabyboomers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rijnstraat40-2.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodolfobuonocore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalschnauzers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roysgate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarworldwideleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniovirtualopenhouses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school-1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiprides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefanmolyneux.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sukanyayojana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summers4coroner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suspicionnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-equalizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetexaswoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalinfo.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvthree.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waringstown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkstables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'why.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radialturbine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resumecourses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--cgj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeshuaismessiah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zealfam.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fef0b2a180000040300463044022070fd86c84e2be4fa790e9045b8446111ad69e599c895558cf9f805488ac0cbf9022040f6e78516b22207778859f6cf9e25aeb0aeaba84b3e6753d5f7bc6ab2f2617d00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fef0b2a47000004030047304502205bd9ce0e29b6de0dcf3eb30e4d48b1649f85e88031f84de6675e66bb98ae7b840221009fb1c01957aabaa8c604d8432fe79cb1a3a4d3c3c2fe47ebbe3f118fc3d98c85
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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