urgen.com

Issued by R3

About this certificate

This digital certificate with serial number 04:28:b9:e8:45:1b:84:f4:aa:2c:b2:96:3b:9d:ea:c6:cd:62 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=urgen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:28:b9:e8:45:1b:84:f4:aa:2c:b2:96:3b:9d:ea:c6:cd:62
Serial Number (int): 362307551597636485484201232940295543770466
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:3c:27:41:d1:02:60:3b:2a:2a:09:d9:fe:f3:8c:46:11:97:36:96
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:14:c0:0f:92:24:8d:1b:1c:91:b1:cb:e0:ea:b0:b1:aa:48:02:04
Fingerprint (sha256): 6a:b0:99:d4:c8:2d:25:6b:56:90:98:d4:90:2a:e8:ae:98:9e:dc:16:a6:0d:79:d2:70:60:f9:a5:07:16:42:75

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate urgen.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for urgen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.accpubg.com
*.catfishcorner.co
*.chequebooks.com.au
*.compracasa.es
*.conda.net
*.dahuja.com
*.dzanic.com
*.eastiesmokeshop.com
*.elephanttrunkfurniture.com
*.enchr.com
*.eopu.com
*.explainhindi.com
*.farrali.com
*.free-gay-games.com
*.gongchengjixie.com
*.gopglee.com
*.hlm123.cc
*.hurla.com
*.inboundagencyleads.com
*.islandspicecan.com
*.joegarden.com
*.kbhames.com
*.longboxes.com
*.mechancisbank.com
*.midwesternbaptistcollege.com
*.mundofalso.com
*.mykonoabq.com
*.mymetergysolution.com
*.newyorkpost.cm
*.oshima-beniya.com
*.peraga.com
*.phimqq.net
*.picapalpetstore.com
*.quanwai.com
*.recantodaterra.com
*.saspaperleaf.net
*.socialmotto.com
*.soldierdesingersfleeks.com
*.telao.com
*.tensostrutture.com
*.thenewagestore.com
*.theswagg.com
*.thisisyourtime.com
*.tonari-shibuya.com
*.totees.com
*.tufundacion.com
*.urgen.com
*.wachildcaretraining.com
*.wayuubags.co
*.westernmutual.cm
accpubg.com
catfishcorner.co
chequebooks.com.au
compracasa.es
conda.net
dahuja.com
dzanic.com
eastiesmokeshop.com
elephanttrunkfurniture.com
enchr.com
eopu.com
explainhindi.com
farrali.com
free-gay-games.com
gongchengjixie.com
gopglee.com
hlm123.cc
hurla.com
inboundagencyleads.com
islandspicecan.com
joegarden.com
kbhames.com
longboxes.com
mechancisbank.com
midwesternbaptistcollege.com
mundofalso.com
mykonoabq.com
mymetergysolution.com
newyorkpost.cm
oshima-beniya.com
peraga.com
phimqq.net
picapalpetstore.com
quanwai.com
recantodaterra.com
saspaperleaf.net
socialmotto.com
soldierdesingersfleeks.com
telao.com
tensostrutture.com
thenewagestore.com
theswagg.com
thisisyourtime.com
tonari-shibuya.com
totees.com
tufundacion.com
urgen.com
wachildcaretraining.com
wayuubags.co
westernmutual.cm

Other certificates including the domain name urgen.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for urgen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362307551597636485484201232940295543770466
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 09:58:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 09:58:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'urgen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877132538953234239728353136595636327494713206460552608590554188867447167441014095391734384986623882955069848512099532762177523088802653449200767033882419076443754603639762813658951816906485028516792609072858448341557377293930035398204520164956926209770349548373612111059169326225857034513617234420030360612922502625922776438795651307557782115987713126929006222436317789456669526704077369059524233440707346380636366066284579348675929751360896465655713193103414904127900588436797419313039404122784817011255527188786099211791108915059962869516899672350961386126945146236243378703957150034072404688803991742324441858398792404339302313670970344071156714590650624742302238641626275377775359605504165666678895709416204260912277736150968208816808671761323485325323513762200457834454757918650358108409679840017549752530908061075324593078662853316447698449320056490610262021892371118687016023241851555591799158848018998843794388774360306487352199152332316623608474789312767068538532407619578478311386844153209781648510480733111637526976643081348062666759766712492751454513440936997192508193540378084209705194559023335153066970793879602916911050677071992953209926833507631102029545161925454547589998632775869458678303730580528190999467204964713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							323c2741d102603b2a2a09d9fef38c4611973696
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1794 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accpubg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catfishcorner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chequebooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compracasa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dahuja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dzanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastiesmokeshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elephanttrunkfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enchr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eopu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.explainhindi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farrali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.free-gay-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gongchengjixie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gopglee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hlm123.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hurla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inboundagencyleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.islandspicecan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joegarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kbhames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longboxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mechancisbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midwesternbaptistcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundofalso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mykonoabq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymetergysolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newyorkpost.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oshima-beniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peraga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phimqq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picapalpetstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quanwai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recantodaterra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saspaperleaf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialmotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soldierdesingersfleeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tensostrutture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thenewagestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theswagg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thisisyourtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonari-shibuya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tufundacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wachildcaretraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wayuubags.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westernmutual.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accpubg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catfishcorner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chequebooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compracasa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dahuja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastiesmokeshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elephanttrunkfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enchr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eopu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explainhindi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farrali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'free-gay-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gongchengjixie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopglee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlm123.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundagencyleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islandspicecan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joegarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbhames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longboxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechancisbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwesternbaptistcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundofalso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mykonoabq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymetergysolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkpost.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshima-beniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peraga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phimqq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picapalpetstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quanwai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recantodaterra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saspaperleaf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialmotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soldierdesingersfleeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tensostrutture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenewagestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theswagg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisisyourtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonari-shibuya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tufundacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wachildcaretraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayuubags.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernmutual.cm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a987e61990000040300473045022036fa5a0ba540e69d4ba25bb18ac0a78c3b338adf51fa6e5539a9e52974b7c192022100e7f7f354d5c644676f17cb4b8086d922e89268b84a225f79cb1d5961644fadb9007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a987e61c60000040300483046022100c4a7bb06ab4572803cceefb8cb855da524942e4c94d07590895df1332feed6d2022100dfed32c0f2b1925d77df86fb987fffe30ec4ce16daf712842cdab9ae03ab016e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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