tekno.xyz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:22:a2:f4:1b:72:bb:c9:fc:4e:a2:a1:44:65:d8:60:dc:b5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tekno.xyz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:a2:f4:1b:72:bb:c9:fc:4e:a2:a1:44:65:d8:60:dc:b5
Serial Number (int): 273123060683058474274612701789512842402997
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:50:60:ee:d8:34:da:3b:9b:02:9b:60:3f:5b:22:f5:5c:a5:de:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cc:72:e6:26:ec:d4:83:5c:a8:93:37:ee:b7:a8:89:a7:6a:9e:e1:df
Fingerprint (sha256): 65:12:a3:b6:a8:47:b3:d0:3b:97:e3:53:a7:4a:f1:83:a4:a4:56:d0:62:7c:ec:c2:f8:b3:e8:8e:a4:9a:f7:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tekno.xyz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tekno.xyz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

africarap.xyz
agedblackgarlic.org
atlantapalace.com
bangalorefinance.com
chinaconstruction.xyz
commodityproducers.org
common.xyz
coping.org
dataintrusion.xyz
demolitionvessel.org
difficile.org
dnja.com
ecobarge.org
economicforum.xyz
energyproduction.xyz
exposcandinavia.com
freight38.com
globalfinancialrisk.org
governmentjakarta.com
haarp.xyz
hullsurvey.org
jeddahfinance.com
jetflight.org
libyaclinic.com
linendirectory.org
marinehullsurvey.org
marketingbusinessworld.com
mayottefinance.com
mymissamericanpie.org
napkins.org
opensourcecable.org
phoenixsettlement.com
plutoniumfuel.com
publicprivatepartnership.xyz
radiow.org
royalfamilyprivate.org
saintpetersburgfinance.com
saudif1.com
singaporegrowing.org
soccerworldcupfinal.com
spacet.org
spacev.org
sportssponsorship.xyz
stpetersburgfinance.com
students123.com
sucrefinance.com
sunwater.xyz
tekno.xyz
thaijoboffshore.com
thechroniclesofnarnia.org
verdi20.com
www.africarap.xyz
www.agedblackgarlic.org
www.atlantapalace.com
www.bangalorefinance.com
www.bernefinance.com
www.bogotaclinic.com
www.chinaconstruction.xyz
www.commodityproducers.org
www.common.xyz
www.coping.org
www.dataintrusion.xyz
www.ecobarge.org
www.economicforum.xyz
www.energyproduction.xyz
www.europeoffshore.org
www.exposcandinavia.com
www.floridasettlement.com
www.freight38.com
www.governmentjakarta.com
www.guiaoffshore.com
www.haarp.xyz
www.hullsurvey.org
www.jetflight.org
www.linendirectory.org
www.marinehullsurvey.org
www.marketingbusinessworld.com
www.materiale.org
www.mayottefinance.com
www.mymissamericanpie.org
www.napkins.org
www.oatmealmilk.com
www.publicprivatepartnership.xyz
www.radiow.org
www.royalfamilyprivate.org
www.saintpetersburgfinance.com
www.saltaprovince.org
www.singaporegrowing.org
www.soccerworldcupfinal.com
www.spacet.org
www.spacev.org
www.sportssponsorship.xyz
www.stpetersburgfinance.com
www.students123.com
www.subseaengineering.org
www.sucrefinance.com
www.sunwater.xyz
www.tekno.xyz
www.thechroniclesofnarnia.org
www.verdi20.com

Other certificates including the domain name tekno.xyz

(limited to 100 certificates)
www.saintpetersburgfinance.com
healthcarepro.xyz
opensourcecable.org
www.healthcarepro.xyz
www.commodityproducers.org
www.online-tutor.xyz
www.sportssponsorship.xyz
feedcorp.xyz
www.earthobservation.xyz
generalcounsels.org
www.spacetrader.xyz
www.asteroidmetals.org
www.oatmealmilk.com
tekno.xyz
commodityproducers.org
www.africarap.xyz
jeddahfinance.com
moscowz.com
www.chinaconstruction.xyz
opensourcecable.org
www.soccerworldcupfinal.com
saintpetersburgfinance.com
www.spacetrader.xyz
www.marketingbusinessworld.com
moscowz.com
www.oatmealmilk.com
oillondon.org
www.bangalorefinance.com
africarap.xyz
saintpetersburgfinance.com
governmentjakarta.com
www.whatwouldyouliketolearn.xyz
tekno.xyz
www.weathermap.xyz
switzerlandrecruiting.com
saintpetersburgfinance.com
www.electricalengineer.xyz
opensourcecable.org
atlantapalace.com
www.bangalorefinance.com
www.energyproduction.xyz
www.spacetrader.xyz
www.exposcandinavia.com
www.spacetrader.xyz
africarap.xyz
offshoreradio.xyz
opensourcecable.org
www.chinaconstruction.xyz
commercialtraders.org
www.bogotaclinic.com
africarap.xyz
www.dataintrusion.xyz
students123.com
www.spacetrader.xyz
www.oatmealmilk.com
www.earthobservation.xyz
www.sportssponsorship.xyz
www.whatwouldyouliketolearn.xyz
powerconsumption.xyz
www.spacet.org
governmentjakarta.com
rideitlikeitsstolen.xyz
www.spacet.org
atlantapalace.com
www.sunwater.xyz

Certificate

The complete raw certificate details for tekno.xyz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ylr7VY6XMEo3YykLRl4
E1S6kcEGiGbKITYB15lZ2iFJAgkPARJg5ah1AxUQoPNxCl0gxkZ+FbmML1jiZofu
D8H79oX+jwHEoa4/YzR2ToH6zSOeEaa4kpVlmk3Ega7Ra+MU7EKaqhu+K6lydx/Q
CYS7gI7eygmDVVU3OopRf8VV6vSjfPV/BwfVjFnip8jQAh8fw29UJFDKHO6fqioV
sylm7AEatn7CxUQQnNDqZUeCXwQIEZoqioHU+XUxKQRhahpA354GzvkblGXj66M+
G1VgeVtLlFb1bv1AK8XPsdUIwtOMb9itKdlltZAjtRHQeR8w6FxHwrR7Lzeq2XWe
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273123060683058474274612701789512842402997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 11:35:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-10 11:35:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tekno.xyz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27461477289413786612027258921853786324797114461624618352158652206052043514910333743277052233683890935319314359263223151039162994160561904412540606254375702299797918598143598798234722589098572304782672631620719434779479884236593904570094290857306440025365311277227639805456405772699441198981174925790798849289439343365165092432680701651621829304761332186097620122456019523927113157265339990149452227721694067445984132576393506482291385614311603277176344074915836289310894217394560428067251049236882012257507617517455246774102323562260245012810181374575893991412296175112227008719214645655934446140575465535763444506341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							625060eed834da3b9b029b603f5b22f55ca5de15
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africarap.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agedblackgarlic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantapalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bangalorefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaconstruction.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityproducers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'common.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coping.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataintrusion.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demolitionvessel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'difficile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecobarge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economicforum.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energyproduction.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exposcandinavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freight38.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalfinancialrisk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governmentjakarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haarp.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hullsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeddahfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetflight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libyaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linendirectory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinehullsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingbusinessworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayottefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymissamericanpie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napkins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opensourcecable.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plutoniumfuel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicprivatepartnership.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalfamilyprivate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpetersburgfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saudif1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singaporegrowing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccerworldcupfinal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportssponsorship.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpetersburgfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'students123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sucrefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunwater.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekno.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaijoboffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thechroniclesofnarnia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdi20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africarap.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agedblackgarlic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantapalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bangalorefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bernefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bogotaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaconstruction.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commodityproducers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.common.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coping.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dataintrusion.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecobarge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economicforum.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energyproduction.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europeoffshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exposcandinavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.floridasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freight38.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governmentjakarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guiaoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haarp.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hullsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jetflight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linendirectory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marinehullsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketingbusinessworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.materiale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayottefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymissamericanpie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napkins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oatmealmilk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicprivatepartnership.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalfamilyprivate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpetersburgfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltaprovince.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singaporegrowing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soccerworldcupfinal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportssponsorship.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpetersburgfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.students123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subseaengineering.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sucrefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunwater.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekno.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thechroniclesofnarnia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verdi20.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016971e66bed0000040300483046022100f815b83d7ce43f96422c8b6e98918e0e574c5db4c766cd3af45b08efa18b5a3e022100dc8de02d7bcb68615a9bca6fb4b2509d4c4709c700c6cfb38879e87b48555ed7007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016971e66c590000040300483046022100f8b321c5a49c763d3cf22bbc139345f8ae1fbcc528d526acd6c1f2b49f41d2dc022100dd66917700c8bc580a5477841e79c0593a36060753465464fc438188e4c3cd95
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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