crewventure.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f6:31:3f:e3:77:e3:50:d8:a6:1a:00:20:e7:70:17:29:89 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=crewventure.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:31:3f:e3:77:e3:50:d8:a6:1a:00:20:e7:70:17:29:89
Serial Number (int): 345111783957932632726291586163330245929353
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:99:60:13:a1:f0:25:f4:77:dc:de:6a:8d:a2:ac:56:b1:2c:ad:39
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0a:c9:5e:45:31:e9:51:8e:84:5f:96:d2:6d:a4:2e:ed:a9:d4:38:04
Fingerprint (sha256): 6d:49:96:8d:a6:a9:ba:29:f7:91:0d:26:f1:e0:e8:19:b0:0a:42:3b:81:11:58:d8:89:cd:66:6c:18:1c:45:17

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate crewventure.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crewventure.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.428.co.in
*.akkaraju.com
*.amongthebest.com
*.austinsurance.com
*.backpackingdesign.com
*.bahariya.com
*.balzecc.com
*.barfing.com
*.bearbottom.com
*.cafe.com.sg
*.careersone.com
*.cincinnai.com
*.comprimes.com
*.crewventure.com
*.educaraunperro.com
*.epee.com
*.erston.com
*.everydolla.com
*.fabeln.com
*.fanglu.com
*.haldwani.com
*.helpforum.com
*.homenetworking.com.au
*.hqsm.com
*.iammai.com
*.icecream.sg
*.impartition.com
*.jafa.org
*.japanesekoi.com
*.jeeun.com
*.joybird.co
*.justboys.com
*.kiemtoan.com
*.laurelee.com
*.licnioglasisrbija.com
*.mesum.com
*.musee-du-chocolat.net
*.mybalancenow.co
*.partnersinsafety.com.au
*.perfectpizzas.com
*.renovable.com
*.reregulate.com
*.solucaocredito.com
*.steinkjer.com
*.trainingfitness.com
*.trakem.com
*.ub888.me
*.women24relaxation.com
*.wwwsageone.com
*.yaghi.com
428.co.in
akkaraju.com
amongthebest.com
austinsurance.com
backpackingdesign.com
bahariya.com
balzecc.com
barfing.com
bearbottom.com
cafe.com.sg
careersone.com
cincinnai.com
comprimes.com
crewventure.com
educaraunperro.com
epee.com
erston.com
everydolla.com
fabeln.com
fanglu.com
haldwani.com
helpforum.com
homenetworking.com.au
hqsm.com
iammai.com
icecream.sg
impartition.com
jafa.org
japanesekoi.com
jeeun.com
joybird.co
justboys.com
kiemtoan.com
laurelee.com
licnioglasisrbija.com
mesum.com
musee-du-chocolat.net
mybalancenow.co
partnersinsafety.com.au
perfectpizzas.com
renovable.com
reregulate.com
solucaocredito.com
steinkjer.com
trainingfitness.com
trakem.com
ub888.me
women24relaxation.com
wwwsageone.com
yaghi.com

Other certificates including the domain name crewventure.com

(limited to 100 certificates)
twinbitcoin.com
crewventure.com
crewventure.com
gige.us
crewventure.com
crewventure.com
mplayhd.com
crewventure.com
quadup.com
crewventure.com

Certificate

The complete raw certificate details for crewventure.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345111783957932632726291586163330245929353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 12:26:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 12:26:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crewventure.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734282436096222057998934982365979251245364576809383913416203445788330025934518349591258862516357402633548716094882157157154384433511319076206551951219535500465637170614617259421245516670673887980355121625773613010061245871256572658019088712784317001611283793244103183884107986886950763815665647775057175104561237409015837993536643616433041081360204755969924272701625810890414072543159116164959780858539115031066821628407834965909562975824318026715994400493492684229542061989591510679172758647179004471220035500938299364035263749787398714833589828110136989443715052982947850796245805262602371624864150204077622520842657670991839416151824459524063545831653394171663682233455621399832508618785840010243282317560242308559319448011338543501770966349567303832918239258050091304953625651124373298081153877611969835227700179038826666095754747477681889258790128275387323054574283775905559621630245718913785001465114551414420649030924579458470068195735400949689668835020986239558146574361551246900149667264276738226587759720019079884309994202774253485143116800667303962705589434219743240310660163597673935911210020845984945180326014278710884487097807298643218659241830363178849864939057614482749199054051669925517977109362190026219132791072591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a996013a1f025f477dcde6a8da2ac56b12cad39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1648 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.428.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akkaraju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amongthebest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.austinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backpackingdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bahariya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balzecc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barfing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bearbottom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafe.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.careersone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cincinnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comprimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crewventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educaraunperro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everydolla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabeln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanglu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haldwani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helpforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homenetworking.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iammai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icecream.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impartition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jafa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japanesekoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeeun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joybird.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiemtoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laurelee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.licnioglasisrbija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mesum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musee-du-chocolat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybalancenow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partnersinsafety.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectpizzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renovable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reregulate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solucaocredito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steinkjer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trainingfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trakem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ub888.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.women24relaxation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwsageone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yaghi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '428.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akkaraju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amongthebest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backpackingdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bahariya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balzecc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barfing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bearbottom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafe.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careersone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincinnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comprimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educaraunperro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everydolla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabeln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanglu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haldwani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenetworking.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iammai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icecream.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impartition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jafa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanesekoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeeun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joybird.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiemtoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurelee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licnioglasisrbija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-du-chocolat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybalancenow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnersinsafety.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectpizzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reregulate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solucaocredito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steinkjer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainingfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trakem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ub888.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'women24relaxation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsageone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaghi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9905dc8c000004030046304402201c333084795fd294370df8e2b80905b89c73b90347e221fd2af3388dd820c1bc02202d08b01147f4c2fbf97f7722ab146212c2572980547cd77f30e013ec2c0a7ec9007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a9905dcf10000040300473045022100b55cb17c4824bbbe94467dfa3fe5c1a9a1de4cb5f137422fa3d5e2c87041c981022053618d8808ac4724f08b08a509bf9f8d4cb06173182cf885a49cf1105f82cf66
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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