openinglishjunior.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6d:f9:12:8b:65:b4:5c:41:8f:f9:5f:f0:1d:52:e7:d5:66 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=openinglishjunior.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:f9:12:8b:65:b4:5c:41:8f:f9:5f:f0:1d:52:e7:d5:66
Serial Number (int): 298758709849269728290705701042589226489190
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:f6:1e:18:24:ae:63:a8:82:e9:5a:ca:2f:19:f7:2d:ed:e1:41:8c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:8c:44:45:3e:93:4c:16:46:bb:9b:6b:48:97:96:5f:f7:f2:60:0c
Fingerprint (sha256): 6c:80:40:03:ec:da:e4:da:31:4d:ca:ef:2a:a4:7a:f3:ef:e4:dc:74:9e:aa:89:87:8d:82:0e:99:7c:b1:66:2e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate openinglishjunior.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for openinglishjunior.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1stdayschoolsuplies.com
*.adovatehealth.com
*.afobe.com
*.ancestryna.com
*.bluepilmen.com
*.cakepassion.com.au
*.coolershop.com
*.cricketwirrless.com
*.davienda.com
*.dfontanellalaw.com
*.ebaumbsworld.com
*.ebaumsowrld.com
*.eddysappliances.com
*.fashionnoova.com
*.fodnetworkmag.com
*.gwir.com
*.herfjonestampabay.com
*.kuznec.biz
*.lunasa.us
*.lusakatime.com
*.marccherubini.com
*.midwestflooring.com
*.netlife.com.au
*.novelaligera.net
*.offlibery.com
*.olcv.com
*.olivegardentogo.com
*.onlinecasinospiele.co
*.onlineleggingsstore.com
*.openinglishjunior.com
*.pavisol.com
*.pipeingrock.com
*.purplehouse.link
*.ronhainer.com
*.rovene.com
*.runaustralia.com.au
*.runnerscode.com
*.sass-lang.co
*.sbbi.co.in
*.stephues.au
*.suitable.com.au
*.sukket.com
*.testmeters.com.au
*.titacoffee.com
*.tjxreawrds.com
*.topreviews.au
*.torents.com
*.visitacit.com
*.xn--mkru45i.com
*.zudio.co
1stdayschoolsuplies.com
adovatehealth.com
afobe.com
ancestryna.com
bluepilmen.com
cakepassion.com.au
coolershop.com
cricketwirrless.com
davienda.com
dfontanellalaw.com
ebaumbsworld.com
ebaumsowrld.com
eddysappliances.com
fashionnoova.com
fodnetworkmag.com
gwir.com
herfjonestampabay.com
kuznec.biz
lunasa.us
lusakatime.com
marccherubini.com
midwestflooring.com
netlife.com.au
novelaligera.net
offlibery.com
olcv.com
olivegardentogo.com
onlinecasinospiele.co
onlineleggingsstore.com
openinglishjunior.com
pavisol.com
pipeingrock.com
purplehouse.link
ronhainer.com
rovene.com
runaustralia.com.au
runnerscode.com
sass-lang.co
sbbi.co.in
stephues.au
suitable.com.au
sukket.com
testmeters.com.au
titacoffee.com
tjxreawrds.com
topreviews.au
torents.com
visitacit.com
xn--mkru45i.com
zudio.co

Other certificates including the domain name openinglishjunior.com

(limited to 100 certificates)
openinglishjunior.com
beautifulclothes.com
2mirror.com
burlingtonfeeback.com
openinglishjunior.com
openinglishjunior.com
openinglishjunior.com
irromo.online
grug.nl
openinglishjunior.com

Certificate

The complete raw certificate details for openinglishjunior.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298758709849269728290705701042589226489190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 04:44:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 04:44:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'openinglishjunior.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1008797970103653820268712167127777714984141051886521233280026188037489314062779397881099474203981179670232718743441385460342680608041305323602432015405350170745710895362456119719012195823798804351071109824719258138688396387902415854710962727137196354704519872656005902371325107008828593445493485226475188167835083729367582254969752106069355161933524403833538724072871212065709690029120910142523839895229670648630264481964337796010101108559288746188605232327105355232861825968507990479250140687157199672283655295062600460337355670831708067506806183848777370491501703129789463263941002777685444761611562294850060229224205701010720441945858544394462101777891777955046511034759414178743757968641965396618077218667310775536104643838256012609717566850318182426039025085891499551274502934656571021993122026354371386524013307661086417571820893311880050644322010000627931225443961375595754205044722181773266878995133452927400912593519664904634272151232988697985683003412204977080429348378105165668374954296440320852500891649027367386441887665370542755850888996647709658063365243578911165807658354665322680377790221127579834741466430547981874735025076758680179935167247098869327313977895130837163455482420917415318596077789056174233925588245251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61f61e1824ae63a882e95aca2f19f72dede1418c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1776 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1stdayschoolsuplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adovatehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ancestryna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluepilmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cakepassion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coolershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cricketwirrless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davienda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfontanellalaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaumbsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaumsowrld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eddysappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashionnoova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fodnetworkmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gwir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herfjonestampabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuznec.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lunasa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lusakatime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marccherubini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midwestflooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netlife.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novelaligera.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offlibery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olcv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olivegardentogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinecasinospiele.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlineleggingsstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openinglishjunior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pavisol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pipeingrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purplehouse.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ronhainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rovene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnerscode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sass-lang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbbi.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stephues.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suitable.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sukket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testmeters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.titacoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tjxreawrds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topreviews.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitacit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mkru45i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zudio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1stdayschoolsuplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adovatehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancestryna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluepilmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cakepassion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwirrless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davienda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfontanellalaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaumbsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaumsowrld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddysappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionnoova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fodnetworkmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herfjonestampabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuznec.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunasa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lusakatime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marccherubini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwestflooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netlife.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novelaligera.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offlibery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olcv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivegardentogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinecasinospiele.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineleggingsstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openinglishjunior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pavisol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipeingrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purplehouse.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ronhainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rovene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnerscode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sass-lang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbbi.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephues.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitable.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sukket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testmeters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titacoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjxreawrds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topreviews.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitacit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mkru45i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zudio.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ad52a741a000004030047304502210091e9f8b1ef2bd6fafcc0324b3915f44d0e36d0152731b8d0e2641df348d1c67d02203a180ddd2aaa09f75257a25eb107f7815d20f805dd7084d3468babf0385ac42a0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ad52a74270000040300483046022100da4d1c9ca0d56d14f502c8a3ceb1f593ae233278b7530242bbf0157ac65ff14b022100e6bf953d83888e2a5fa83d59927e67c3142bb1f434963eb54379184498db9b1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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