urgen.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ec:ea:9b:ef:08:97:91:25:6d:56:5f:66:b6:51:3d:ea:a7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=urgen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:ea:9b:ef:08:97:91:25:6d:56:5f:66:b6:51:3d:ea:a7
Serial Number (int): 341955345393825588810104710967635593783975
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:05:4a:44:56:57:c3:1b:56:f8:ae:32:c2:44:98:10:a5:2d:0d:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): da:50:7d:c5:71:34:20:ea:62:1d:95:46:d0:c8:fc:47:b3:ec:b1:11
Fingerprint (sha256): 52:b9:4b:54:9f:de:ce:be:cf:49:64:e6:61:86:51:f1:56:bc:b1:6e:56:5c:95:dc:93:20:04:82:55:58:45:4f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate urgen.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for urgen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1004fip.com
*.akshra.com
*.apsie.com
*.awsclic.com
*.bettinson.com
*.bradfords.com
*.daebak.com
*.dealleaks.com.au
*.devermont.com
*.dorell.com
*.dzanic.com
*.egbp.com
*.elephanttrunkfurniture.com
*.eopu.com
*.expressypn.com
*.festoo.de
*.fianca.com
*.giacmo.com
*.hampp.com
*.hanqin.com
*.hurla.com
*.insrethebox.com
*.insurethabox.com
*.kineticfitness.com
*.kwikparts.com
*.meganegocios.com
*.musictickets.org
*.nalace.com
*.paala.com
*.peksimet.com
*.peraga.com
*.picapalpetstore.com
*.pivotasset.com
*.sartistsnetwork.com
*.saxvideoxx.com
*.sharemyhealth.com
*.socialmotto.com
*.telao.com
*.thefountaincenter.com
*.theswagg.com
*.thetimbers.com
*.thisisyourtime.com
*.timoras.com
*.tooncobuss.com
*.trafegonetwork.net
*.triumphs.com.au
*.urgen.com
*.wahousing.com
*.weseman.com
*.wwwancestry.co.uk
1004fip.com
akshra.com
apsie.com
awsclic.com
bettinson.com
bradfords.com
daebak.com
dealleaks.com.au
devermont.com
dorell.com
dzanic.com
egbp.com
elephanttrunkfurniture.com
eopu.com
expressypn.com
festoo.de
fianca.com
giacmo.com
hampp.com
hanqin.com
hurla.com
insrethebox.com
insurethabox.com
kineticfitness.com
kwikparts.com
meganegocios.com
musictickets.org
nalace.com
paala.com
peksimet.com
peraga.com
picapalpetstore.com
pivotasset.com
sartistsnetwork.com
saxvideoxx.com
sharemyhealth.com
socialmotto.com
telao.com
thefountaincenter.com
theswagg.com
thetimbers.com
thisisyourtime.com
timoras.com
tooncobuss.com
trafegonetwork.net
triumphs.com.au
urgen.com
wahousing.com
weseman.com
wwwancestry.co.uk

Other certificates including the domain name urgen.com

(limited to 100 certificates)
gyanism.com
reciprocidad.com
urgen.com
urgen.com
urgen.com
urgen.com
urgen.com
evanmueller.com
stoil.com
urgen.com
acurafinance.com
urgen.com
nguyenkhang.com

Certificate

The complete raw certificate details for urgen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341955345393825588810104710967635593783975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-19 08:08:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-17 08:08:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'urgen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767602950352959096152387082273684903203165832251308255430050055161483504185687261738186994498594009922802381766811103661206805634612587163731140837974507539380628125764863170557804306385874740534308631363798427564112429490501182164561368311082128203367925068767145533020113573872920578186841219762588295000986833597110292820466988988803656735587450811242099972067849191902970381435767307805195901426258641993389148724323018425125008583729715306793902226972858887057909690959201598415317815811113053982283106646051978701782432991221039608769078343117908202523927531713118297955615736917197297192801108251114337626152428234736304427023140318595190620264434376527087469312747290202027681699894254566054965159835727016277117178322228907513483038946801561100717482248455694539643188181908034372712335809083187125628784751357932894711784481119982998987613169194334370901170552348240116946697042752428840325409688510559700852747980726596688846418795896336357290912769791739363111550859811556337010631776895211897601829141149052575481042927289221778068578481818809218982646653676926101960148858196774432295813993980396646136616470201535133617513127189733234358803741787244664438262933887087139673158537126483769573381996620241668962179466537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9054a445657c31b56f8ae32c2449810a52d0de9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1612 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1004fip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akshra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apsie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awsclic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettinson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bradfords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daebak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealleaks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dorell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dzanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egbp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elephanttrunkfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eopu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expressypn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.festoo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fianca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giacmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hampp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanqin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hurla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insrethebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insurethabox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kineticfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kwikparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meganegocios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musictickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peksimet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peraga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picapalpetstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pivotasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sartistsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saxvideoxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharemyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialmotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefountaincenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theswagg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetimbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thisisyourtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timoras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tooncobuss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trafegonetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triumphs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wahousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weseman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwancestry.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1004fip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akshra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apsie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsclic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettinson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradfords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daebak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealleaks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egbp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elephanttrunkfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eopu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressypn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'festoo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fianca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giacmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanqin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insrethebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurethabox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kineticfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwikparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meganegocios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musictickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peksimet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peraga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picapalpetstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pivotasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartistsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saxvideoxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharemyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialmotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefountaincenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theswagg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetimbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisisyourtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timoras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tooncobuss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trafegonetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triumphs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weseman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwancestry.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001848f25be7f0000040300473045022032cddf010195eec644b4819d14ff13d23af9074a7be0c3225e017df0aa3d6fd902210080906027ebde428f9d1130222cb0981db28942cd6bce8a318108d3029fe84c3e007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001848f25c066000004030046304402203a19ce3c1bc8b7297eb024336c494c6eea8634d32b97ffaeda450a4f4a11128702201862d9ab621e6c07d9eaa3797f97b3e0f0388adde234f018b554f86a6ac374f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ee61a59edc317000c490ec989e0debd46fbec67d546a282643f33d3868383b61423afc99bafc5eff41def1509484f7996e80bcdd4cc6ce9923edce8c79efdb6b29a7f7d458cb56f0f328f4443d3758c5087681a9e9fe1c30e3a9018970e53849417157f526133a7cd5641919920a182210eddf10c975b6403a3770ba5dae9a37e5d18222f5d50ddaa3b76acfca847b716d30534648d02adfa3d071315962ac5465719e59354d764ac9e3813c7f5cd663bb95a1f39e63ba572132e6dd5dc5badb174da277d9c2290400c7fb03a7dd7f2f3b540cbcb6c2c18084688318f2a91da59d0cb329ffa37f606439decbe31a114e0ce3ec4afa3cc57eabc39820254ff4f