canadianpropaganda.ca

Issued by R11

About this certificate

This digital certificate with serial number 04:f9:66:75:18:79:86:a6:ac:74:2e:62:a5:fe:2f:24:a5:40 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=canadianpropaganda.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f9:66:75:18:79:86:a6:ac:74:2e:62:a5:fe:2f:24:a5:40
Serial Number (int): 433315642341063284622002992722578896102720
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:06:53:a6:9e:e4:17:43:27:d4:b5:d4:da:98:8d:67:84:4b:ff:d8
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): b4:62:bb:19:ca:79:c0:38:2c:d1:0b:57:83:45:be:95:97:66:a2:07
Fingerprint (sha256): 5e:a2:76:92:d2:5c:d3:39:40:31:45:db:89:40:98:9f:95:96:7f:b6:e1:28:df:bc:f3:90:a0:da:2c:f4:d4:87

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate canadianpropaganda.ca

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canadianpropaganda.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affordabledesignerwatches.com
alifeofgrime.com
arbitragemovie.com
brickell10.com
buyerrebateprogram.com
buysellsportscollectibles.com
canadianpropaganda.ca
captainstreasure.com
captivavacationrentals.com
caraccidentlawyerca.com
chainreactionbike.com
chemicallogistics.com
childfoundation.us
clams4free.org
claudioirl.com
czechglassware.com
distinctlymontanamagazine.net
encontrosmulher.com
eringeevoice.com
essonne.net
explorationandproduction.com
farheen.in
freecavitywallinsulation.uk
fuckpodcast.com
gamingmousestore.com
gardenfinders.com
gaytravel4you.com
golfdispatch.com
hempforptsd.com
hempvap.com
i-hemp.com
internationaldivorces.com
jagadambe.co.in
kennerla.com
liquid-productions.net
liquidproductions.me
markquay.com
massdeportation.com
mohelmajority.com
muranoclass.com
myseomarketing.com
nswcouncilelections.com
onecloudmanagement.com
onecortland.com
patriotguncoalition.com
personalflyingvehicles.com
processingpork.com
retireintennesse.com
rxsugaristhesugarvaccine.com
settlementannuity.com
showleadmagnets.com
snodgrass.com.au
socialhearted.com
soiltreatment.com
standwithstrand.org
summitparkbible.org
supervisoryskills.com
suttoncounty.com
tackcloth.com
terryleforillinois.com
thegriefbusiness.com
vehicleblogs.com
vestalvirgins.com
watchwhiteprivilege.com
watermarkgroup.org
weaverlandfurniture.com
whitwell.works
wowyah.com
www.nationalwealthpartners.com
www.oilseedcrushing.com
www.parabolicdish.com
www.prosecutorialmisconduct.com
xn--a-0ga.at

Other certificates including the domain name canadianpropaganda.ca

(limited to 100 certificates)
canadianpropaganda.ca
canadianpropaganda.ca
canadianpropaganda.ca
canadianpropaganda.ca
canadianpropaganda.ca
canadianpropaganda.ca
canadianpropaganda.ca
canadianpropaganda.ca
canadianpropaganda.ca
fitsof.com.canadianpropaganda.ca

Certificate

The complete raw certificate details for canadianpropaganda.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2pIyE7OMRIsxw2JyqH9
hXlujwwoSWCBDS/Gc8hxvi8YMeqOqgFI7+HYDbxZOGD0GYmVHxDnj4tEpgLkx1h9
a0sEWeK/0rOOt/JJnhH5ROelUNIpUsg0SK+5j8eo3iXJ3QARki+gj7tvKbIqVhju
QaWBTQ0YwKC9YAJHDjjExMF8wicKWhZCNOlTenRQVMT/jFN+srZFccIbSID8hIXL
imETapAWGaJ1cFArrrSTqN64gbi2SEo1NkMjSTh5TzDcCZ+lTeNao61oHaZ5COhp
nUUUzp4xhiIDH/DhsNTypa3bcw+qq+y/uriGGlDFnT2wv2mrYOD9cz0QyZ/smSdK
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433315642341063284622002992722578896102720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 19:44:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 19:44:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canadianpropaganda.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25173833433133830355696361193175954827331376855375493597984688859357562327432918085851330444755215349908406938799021789854538971633450446174812839474826916100351652625228912771032177154436925154861969883255613682651540375452147694882597094853973047688405789797974333727420865901921526860334904726443780024533811880836292090950374716534510070534053103909942196070076080312477116328835767308835587918755918617097659393442849493616613071088820801279263668704950911926599333666322625323876219301703769905149256517515904851539876408844966668779688308288202610372518470392214074464760304161235870834815110955786032875260669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							650653a69ee4174327d4b5d4da988d67844bffd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1543 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordabledesignerwatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alifeofgrime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brickell10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyerrebateprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysellsportscollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadianpropaganda.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captainstreasure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captivavacationrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caraccidentlawyerca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chainreactionbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemicallogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childfoundation.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clams4free.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claudioirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czechglassware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distinctlymontanamagazine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encontrosmulher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eringeevoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essonne.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explorationandproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farheen.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freecavitywallinsulation.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuckpodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamingmousestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardenfinders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaytravel4you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempforptsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempvap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-hemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationaldivorces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jagadambe.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennerla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquid-productions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidproductions.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markquay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massdeportation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohelmajority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muranoclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myseomarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nswcouncilelections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onecloudmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onecortland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriotguncoalition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalflyingvehicles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'processingpork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retireintennesse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugaristhesugarvaccine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settlementannuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showleadmagnets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snodgrass.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialhearted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soiltreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standwithstrand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summitparkbible.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supervisoryskills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suttoncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tackcloth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terryleforillinois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegriefbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehicleblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vestalvirgins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchwhiteprivilege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weaverlandfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitwell.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowyah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalwealthpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oilseedcrushing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parabolicdish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prosecutorialmisconduct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--a-0ga.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff4728359000004030046304402207a9f948affcf3a5062a7ce77c592be45a61f1b6b9b91c36b3e60a412680856c50220274c416feda2b62cbd19a44aac6b8827fd42030ae6990219bd29b6af66972ad90076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ff472836000000403004730450220422f7859b35a0a360f0c4b978065830a8414d3a51814211c3be9fd32d651b194022100da909dbfb2e484ab8ad77fec17a13defcec232dcd1258c1631fc40fb59b7871c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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