bayridgeequestrian.org

Issued by R3

About this certificate

This digital certificate with serial number 04:08:ae:22:5d:cb:ab:67:31:f6:97:04:9d:6b:fe:e6:ce:32 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bayridgeequestrian.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:08:ae:22:5d:cb:ab:67:31:f6:97:04:9d:6b:fe:e6:ce:32
Serial Number (int): 351402866774168716662211846305521454206514
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 95:d8:cf:76:e0:8c:af:4c:c1:24:ed:8f:c1:ad:48:49:03:72:03:31
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:62:0c:3a:ef:62:b6:47:a4:8d:8a:1a:71:c9:8a:ac:a1:e3:f4:01
Fingerprint (sha256): 51:0e:c9:47:65:b4:56:d6:ef:a4:8f:41:3c:75:4b:0e:e9:31:0a:7f:b4:a2:28:d8:d2:b9:72:21:66:07:08:3d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bayridgeequestrian.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bayridgeequestrian.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.38xhg.xyz
*.4tech1.com
*.aberfoyleparkrealestate.com.au
*.adorocompraronline.com
*.amirajensen.com
*.bankmybet.com
*.bayridgeequestrian.org
*.bobapub2.com
*.cavalaria.com
*.chmview.com
*.computerscience.com.au
*.comsquarespace.com
*.cornerstone-pres.org
*.deafnow-bg.org
*.elitedentists.com
*.fieldnotesmagazine.com
*.frozendrinks.com.au
*.homifitness.com
*.hugemortgages.com
*.joinaspa.com
*.kodiakpubliclibraryassociation.org
*.lampbeef.top
*.lochaberfarmshop.com
*.lwdedetizacao.com
*.meds-online365.com
*.melbourneholiday.com.au
*.metaliteind.com
*.minnechaug.com
*.mobileyoutube.com
*.ninety-five.co
*.over60datingonline.com
*.paragonautosalesmi.com
*.physiciansseniorlivingfund.com
*.physicist.com.au
*.prolirica.com
*.relacinco.com
*.scorrybreac.co.uk
*.shubharti.com
*.sokankan17.cc
*.stephyrs.com
*.suntrust-logistics.com
*.tentcabin.org
*.tiendajitan.com
*.tradiesprotect.com.au
*.usalve.com.br
*.utahrealtor.com
*.vamgreview.com
*.wholefoodsmarket.co
*.witnessperpetual.top
*.wtflivetv.com
38xhg.xyz
4tech1.com
aberfoyleparkrealestate.com.au
adorocompraronline.com
amirajensen.com
bankmybet.com
bayridgeequestrian.org
bobapub2.com
cavalaria.com
chmview.com
computerscience.com.au
comsquarespace.com
cornerstone-pres.org
deafnow-bg.org
elitedentists.com
fieldnotesmagazine.com
frozendrinks.com.au
homifitness.com
hugemortgages.com
joinaspa.com
kodiakpubliclibraryassociation.org
lampbeef.top
lochaberfarmshop.com
lwdedetizacao.com
meds-online365.com
melbourneholiday.com.au
metaliteind.com
minnechaug.com
mobileyoutube.com
ninety-five.co
over60datingonline.com
paragonautosalesmi.com
physiciansseniorlivingfund.com
physicist.com.au
prolirica.com
relacinco.com
scorrybreac.co.uk
shubharti.com
sokankan17.cc
stephyrs.com
suntrust-logistics.com
tentcabin.org
tiendajitan.com
tradiesprotect.com.au
usalve.com.br
utahrealtor.com
vamgreview.com
wholefoodsmarket.co
witnessperpetual.top
wtflivetv.com

Other certificates including the domain name bayridgeequestrian.org

(limited to 100 certificates)
bayridgeequestrian.org
rentalblog.com
bayridgeequestrian.org
rydel-seiffer-stimmgabel.de
bindegewebsentzuendung.de
rentalblog.com
bayridgeequestrian.org

Certificate

The complete raw certificate details for bayridgeequestrian.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351402866774168716662211846305521454206514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 18:14:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 18:14:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bayridgeequestrian.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741593559332642636605635079800902833493136519768145340660830463244285731362450908726600455309015267609248110729770501129376254183204492100818223698277422201924016410475537817957040253564070396335248168421677900626819420224665408431145382594929430311023377845538952288852662656429915007232248538327216502022024515694492084335001025511802094507494813341131470399915016715174713032120705681920595818176058616191198678981633279842925932063536723778091089172642067820410289220732590946887257553864815657144908687219211861022042591402469264180662158365491668363255144250283292943726280353959490256341280628631173150782901309854821960366017651211006080008053811839444126440369456711602541609775627038431235256135187783150999141933220460726156986059265777088997680431865462264660408548838849365342254634637208120913942462164896476379926093434639817028473012418331163353573907027948678303214953049176144595995248665303919972774995985416013377805073251742910635666420510292358917646448700138795264668279095098637057694436116570419907900167783115526210865457824245077177415348914408319504274896961776789077833103736084749759908165541320723099673013813617554349192836437319051822761555841143257448208002080090810009074276480284721759266505964943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95d8cf76e08caf4cc124ed8fc1ad484903720331
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2010 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.38xhg.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4tech1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aberfoyleparkrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adorocompraronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amirajensen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankmybet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayridgeequestrian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobapub2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cavalaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chmview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.computerscience.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comsquarespace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cornerstone-pres.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deafnow-bg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elitedentists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fieldnotesmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frozendrinks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homifitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hugemortgages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joinaspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kodiakpubliclibraryassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lampbeef.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lochaberfarmshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lwdedetizacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meds-online365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melbourneholiday.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metaliteind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minnechaug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobileyoutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ninety-five.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.over60datingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paragonautosalesmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.physiciansseniorlivingfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.physicist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prolirica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relacinco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scorrybreac.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shubharti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sokankan17.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stephyrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suntrust-logistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tentcabin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiendajitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradiesprotect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usalve.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utahrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vamgreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wholefoodsmarket.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.witnessperpetual.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wtflivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '38xhg.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4tech1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberfoyleparkrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adorocompraronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amirajensen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankmybet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayridgeequestrian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobapub2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavalaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chmview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computerscience.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comsquarespace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornerstone-pres.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deafnow-bg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitedentists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldnotesmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frozendrinks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homifitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugemortgages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinaspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodiakpubliclibraryassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lampbeef.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lochaberfarmshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwdedetizacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meds-online365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melbourneholiday.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaliteind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnechaug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileyoutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninety-five.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'over60datingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paragonautosalesmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physiciansseniorlivingfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physicist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prolirica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relacinco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorrybreac.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shubharti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sokankan17.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephyrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suntrust-logistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tentcabin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiendajitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradiesprotect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalve.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vamgreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholefoodsmarket.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witnessperpetual.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtflivetv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d043f3a780000040300473045022100c641b671279f26b780b5546147b04dfe9e02c9901c05af63842662145e920bab0220013fc2671cf094a56db483f906224eb9626f413c2d3d852d11b7f5cfc747d3e600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d043f3b6a0000040300473045022016ea82c0312e55d7f6f8e701b5b5d5bf1748252b3b0dc2bf54847761651eea25022100e07142034f3ed893dd32f2760f1d32d63a8e4615f21b99c749483ee5a3be0d4f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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