championshipusa.com

Issued by R3

About this certificate

This digital certificate with serial number 04:99:90:cd:8e:29:92:42:9e:9d:f6:d1:46:4b:c7:a8:da:cd was issued on by Let's Encrypt.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=championshipusa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:99:90:cd:8e:29:92:42:9e:9d:f6:d1:46:4b:c7:a8:da:cd
Serial Number (int): 400704822001589382752961787089694470232781
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 93:4a:0d:2e:bf:d5:b0:76:a2:b5:16:4e:69:21:a4:a9:c5:4d:31:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e5:70:2f:16:4c:93:a3:94:86:75:f0:6c:a8:ee:f8:d4:a0:28:82:e7
Fingerprint (sha256): 51:d9:ac:45:dc:0e:bd:cc:2d:51:1f:f6:8f:5c:a0:71:66:e7:6d:f6:12:e1:88:d2:9a:84:17:66:e2:ff:0d:7e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate championshipusa.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for championshipusa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

algorythmcode.com
balletbirthdayparty.com
balletclipart.com
balletsydney.com
banknewspaper.com
barbieballet.com
beethovenpianoconcerto4.com
bitcoin3dmedia.com
boulevardraspail.net
championshipusa.com
citybeachhouse.com
dancersballet.com
eastlondonbusinessschool.com
energyregeneration.net
entertainyourbrains.com
floatingsolarfarms.com
fmparis.com
friedrichsfelde.net
furstenwalde.net
gymparis.com
kinshasaartists.com
lesotholegal.com
londonmedia.com
mallparis.com
maritimesouthafrica.com
mediabuildings.com
moscowattractions.com
northkoreadaily.net
nouakchottfinance.com
organicfarma.com
russianforeignpolicy.net
saintlouisfm.com
satellitemapper.com
satinballet.com
tanksensors.org
uberfallen.net
whatisballet.com
womenparis.com
www.academyarea.com
www.algorythmcode.com
www.balletbirthdayparty.com
www.balletclipart.com
www.balletsydney.com
www.banknewspaper.com
www.beethovenpianoconcerto4.com
www.bitcoin3dmedia.com
www.blackhistorywomen.com
www.chelseatennis.com
www.citybeachhouse.com
www.ciudadjuarezlaw.com
www.colognefm.com
www.dancersballet.com
www.dieselparis.com
www.eastafricatribe.com
www.eastlondonbusinessschool.com
www.floatingsolarfarms.com
www.fmparis.com
www.frenchfilmfestival.net
www.friedrichsfelde.net
www.furstenwalde.net
www.gccmerchants.com
www.gymparis.com
www.holidayshanghai.com
www.icelandsales.com
www.lagosvacation.com
www.londonmedia.com
www.mallparis.com
www.managerprinting.com
www.maritimesouthafrica.com
www.mediabuildings.com
www.moscowattractions.com
www.northkoreadaily.net
www.oilplatforms.org
www.organicfarma.com
www.palestineterritories.com
www.russianforeignpolicy.net
www.satinballet.com
www.treasurearabia.com
www.vermontpost.com
www.wallstreetdance.com
www.whatisballet.com
www.yachtsmonaco.net
yachtsmonaco.net

Other certificates including the domain name championshipusa.com

(limited to 100 certificates)
www.fashiondenmark.com
www.solarpowertrade.net
www.holidayshanghai.com
moscowattractions.com
sensualside.net
www.mallparis.com
www.radioodessa.com
www.olamide.net
jayaoffshoredrilling.com
www.swisscreative.com
www.barbieballet.com
encodersusa.com
militaryabduction.com
www.tvnewsusa.com
www.levieuxmonde.net
www.femaleusa.com
www.whatisballet.com
www.czechrepublicgold.com
wntrade.net
saintlouisfm.com
www.indonesia-manning.com
www.holidayshanghai.com
furstenwalde.net
www.czechrepublicgold.com
subseausa.com
www.organicfarma.com
www.greekbusinessman.com
organicfarma.com
www.mallparis.com
gymparis.com
championshipusa.com
dubaicrude.net
satinballet.com
newsarchiveamerica.com
www.indonesia-manning.com
www.levieuxmonde.net
www.mallparis.com
www.balletbirthdayparty.com
cairoproject.com
www.gamerorg.com
pacificwaterside.net
foreignstudentinusa.com
www.newsarchiveamerica.com
militaryabduction.com
www.solarpowertrade.net
aricacollege.com
www.wncode.net
www.bosphorustrade.net
lesotholegal.com
tasmaniagenocide.net
www.istanbulmode.net
www.luandatimes.com
www.northkoreadaily.net
www.offshoreoilusa.com
www.luandatimes.com
algeriagold.com
www.congo-republic.com
www.bosphorustrade.net
www.abstractartguide.net
czechrepublicgold.com
www.serbiafree.com
www.tvnewsusa.com
pacificwaterside.net
www.pacificwaterside.net
flamencodreams.com
www.femaleusa.com
balletbirthdayparty.com
www.singaporecountryclub.com
algeriagold.com
www.eastlondonbusinessschool.com
bitcoin3dmedia.com
mediabuildings.com
wncode.net
dancersballet.com
entertainyourbrains.com
singaporecountryclub.com
www.colonialamericagenocide.net
algeriagold.com
femaleusa.com
www.cebuoffshore.com
whatisballet.com
www.championshipusa.com
www.balletcollege.net
furstenwalde.net
www.pacificwaterside.net
friedrichsfelde.net
www.madridpenthouse.com
llcdistribution.com
newsarchiveamerica.com
femaleusa.com
www.bosphorustrade.net
balletbirthdayparty.com
furstenwalde.net
femaleusa.com
worldlawyersguide.net
www.luandatimes.com
femaleusa.com
www.maritimesouthafrica.com
militaryabduction.com
www.underwatercourse.com

Certificate

The complete raw certificate details for championshipusa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6p3lRZHuFJuNvbDrp+FL
hoy/OwO2WlrD3HMlEZ+WkVja1r2ntDj5bIc1HxMb2dvs4bzlrS+8Cb8P99UcSW6Z
qxmR4GSYvui7jxnZKCCwVwaCwfhTn2BXUMii/QiuYFrSZKqmYgdZL7l3Q6kum+Dz
EJgM4EVNuu3u2RIETJkm8tMphKxEHCFQ7xlBy10fYCbSCjTvxugQbqJF2NiTOyLR
NpQGxgWcWD9ruvVax0Av4oe9t3oF8Reh6mLukVfplRJdd65dm1Hqj9u7USEA9nvf
J6OQMq42LQ7tjHtMvTgTc3v/lCgpan9yAzzT219MyU4oYADAqOSaA8KXpOn1IwLd
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400704822001589382752961787089694470232781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 10:33:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-25 10:33:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'championshipusa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29617624580797004919200888943124427999371779065225294555164618603465767179386126414676796698365792264270144282819457003337405718585301918166507621288256320646280720716057159995427249355299526496269626106921908766875495052096804423730732014339629039217447429253128329530791199219330501683115409542095579495948309242148546286769195218652826735186231650156429738787524762075004288240006909373548508451772990860743538601664301562507837528319662785049363942701539844591331303299183669715791313617321927583730437564424487105922739509968042923237705133370456601241087956314898563532031700340095966855632948821265099643870671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							934a0d2ebfd5b076a2b5164e6921a4a9c54d315b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1848 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algorythmcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balletbirthdayparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balletclipart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balletsydney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banknewspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbieballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beethovenpianoconcerto4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoin3dmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boulevardraspail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'championshipusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citybeachhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancersballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastlondonbusinessschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energyregeneration.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainyourbrains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floatingsolarfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friedrichsfelde.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furstenwalde.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gymparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinshasaartists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesotholegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mallparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritimesouthafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediabuildings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moscowattractions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northkoreadaily.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nouakchottfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicfarma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russianforeignpolicy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlouisfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satellitemapper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satinballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanksensors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uberfallen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatisballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academyarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.algorythmcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balletbirthdayparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balletclipart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balletsydney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banknewspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beethovenpianoconcerto4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoin3dmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackhistorywomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chelseatennis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citybeachhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciudadjuarezlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colognefm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dancersballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dieselparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastafricatribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastlondonbusinessschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.floatingsolarfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frenchfilmfestival.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friedrichsfelde.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.furstenwalde.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gccmerchants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gymparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holidayshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagosvacation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mallparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.managerprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maritimesouthafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediabuildings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moscowattractions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northkoreadaily.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oilplatforms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicfarma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palestineterritories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.russianforeignpolicy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satinballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treasurearabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallstreetdance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatisballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yachtsmonaco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtsmonaco.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fb9d3dabe0000040300483046022100f74c0c7885bbff020e0076c90c5eccf13639e614fe72308b0fa5d5d6c8dee9f102210099af3bf460bdca782c0e668952df48724117202f4b07b9367b7ea4c88c7726a000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fb9d3dae2000004030046304402200d7b6b09c34b87b40c1c80dd34fb6c05dc8d41b0f4a7cddb6fe6676f829f0c8002200a6e5293807d67c19a7f2f1befb17b9d67f5c37d081dd60af2ae56e4c5f1f0a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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