stockhedger.com

Issued by R3

About this certificate

This digital certificate with serial number 04:67:d4:6f:c6:6b:10:0e:2a:48:e3:20:13:94:7a:d8:2b:53 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stockhedger.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:67:d4:6f:c6:6b:10:0e:2a:48:e3:20:13:94:7a:d8:2b:53
Serial Number (int): 383780604224354831651005124703854238640979
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cc:72:84:2f:fc:48:f0:de:8f:b8:34:fc:49:82:6f:23:d6:82:e8:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 99:d6:3d:71:3f:eb:e3:de:1c:0c:fa:24:b6:f7:64:f5:0b:2d:94:35
Fingerprint (sha256): 74:82:bb:fc:e6:12:1a:59:3e:f7:c4:44:a3:b9:3a:83:7f:3b:b3:d2:05:de:25:a0:81:1d:d7:d9:00:e0:b3:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stockhedger.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stockhedger.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aetnaadvantage.com
*.attwifimanager.com
*.averabenefits.com
*.avtivaterewards.com
*.blenderizeddiet.com
*.bmwsterling.com
*.botanicbrasil.com
*.capione.com
*.carprt.com
*.dupicolor.com
*.emailsrve.com
*.funny-time.de
*.gotigergo.com
*.gurneyjourney.com
*.ihgmerin.com
*.jcomcast.net
*.jjcpenneys.com
*.jukur.com
*.lakshore.com
*.lgcanada.com
*.linencupboard.com.au
*.lirio.es
*.luigisdeliconcord.com
*.mashallsfeedback.com
*.myturnnow.com
*.nroton.com
*.pegi2.com
*.questdiagontics.com
*.rarevideosfree.com
*.rekupera.com
*.rppurchase.com
*.rundfunkbeitra.de
*.shocking.au
*.stockhedger.com
*.stupidrichlife.com
*.takeascreenshot.org
*.termoglas.com
*.tinyuyrl.com
*.tonymac86.com
*.traliexpress.com
*.truly.com.au
*.uhone.co
*.wageowrks.com
*.wenxuevity.com
*.wgoer.net
*.www-lotto-bayern.de
*.wwwbexar.org
*.wwwstatefarmbenefits.com
*.youjuz.com
*.youtubess.com
aetnaadvantage.com
attwifimanager.com
averabenefits.com
avtivaterewards.com
blenderizeddiet.com
bmwsterling.com
botanicbrasil.com
capione.com
carprt.com
dupicolor.com
emailsrve.com
funny-time.de
gotigergo.com
gurneyjourney.com
ihgmerin.com
jcomcast.net
jjcpenneys.com
jukur.com
lakshore.com
lgcanada.com
linencupboard.com.au
lirio.es
luigisdeliconcord.com
mashallsfeedback.com
myturnnow.com
nroton.com
pegi2.com
questdiagontics.com
rarevideosfree.com
rekupera.com
rppurchase.com
rundfunkbeitra.de
shocking.au
stockhedger.com
stupidrichlife.com
takeascreenshot.org
termoglas.com
tinyuyrl.com
tonymac86.com
traliexpress.com
truly.com.au
uhone.co
wageowrks.com
wenxuevity.com
wgoer.net
www-lotto-bayern.de
wwwbexar.org
wwwstatefarmbenefits.com
youjuz.com
youtubess.com

Other certificates including the domain name stockhedger.com

(limited to 100 certificates)
stigleycabinets.com
stockhedger.com
stockhedger.com
stockhedger.com
stigleycabinets.com
stigleycabinets.com
stigleycabinets.com
stigleycabinets.com

Certificate

The complete raw certificate details for stockhedger.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383780604224354831651005124703854238640979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 06:20:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-10 06:20:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stockhedger.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 911346591380587534141628226738509004177835396632563010729556885745744591451153326969216205626434677955732570627406832644346670541503113900675047217328249199967365373741662506927647187566265562398687341685640562427608513490211384600185515610670485378156645058707267374577931230970806658255846898059339675555213430080394086229914269072137156641293283838159770672264768634228320408437434331661197761149072867275181390904651781838384127106475964477394649334130515715201103445987280779117950209499631584414523337061743305814611394678045612053169533271835098725054054998426573925125127270864388336336431757255912605102305088483960382530847436844934482634908516657653083725336549813174794029864232252788497271490359399242084489418135234595000633358616500946446463765830736138425083196551481481832224143515179340607345590718451085096148307921936478132422379738934287766665478681895627906317631889223110106472673665276072235609489437824060980636121994738126702355520692416925404659260204294702476651613140594468060112490430086173110532185337808907249551168990539795605656727054072366786717537377604340246271432313298340952203465740485569680997655169821470307682546897435016960442981069084888796377273706207225164774620469980809567434324108147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc72842ffc48f0de8fb834fc49826f23d682e868
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1736 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aetnaadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attwifimanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.averabenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avtivaterewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blenderizeddiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmwsterling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botanicbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carprt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dupicolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emailsrve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funny-time.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotigergo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gurneyjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihgmerin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcomcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jjcpenneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jukur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lakshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lgcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linencupboard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lirio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luigisdeliconcord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mashallsfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myturnnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nroton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pegi2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.questdiagontics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rarevideosfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rekupera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rppurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rundfunkbeitra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shocking.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stockhedger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stupidrichlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takeascreenshot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.termoglas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinyuyrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonymac86.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traliexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uhone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wageowrks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wenxuevity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wgoer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-lotto-bayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbexar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwstatefarmbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youjuz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youtubess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetnaadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attwifimanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'averabenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avtivaterewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenderizeddiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwsterling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botanicbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carprt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupicolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailsrve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funny-time.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotigergo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurneyjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihgmerin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcomcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjcpenneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jukur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linencupboard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lirio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luigisdeliconcord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mashallsfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myturnnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nroton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pegi2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questdiagontics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarevideosfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rekupera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rppurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rundfunkbeitra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shocking.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockhedger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stupidrichlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takeascreenshot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termoglas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinyuyrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonymac86.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traliexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wageowrks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wenxuevity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wgoer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-lotto-bayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbexar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwstatefarmbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youjuz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youtubess.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f6baccdc20000040300483046022100c16a04d642984789092d3483aa82c71ca993016518c1e179fa2b0571c5981bbe022100d4274f961691090d939cee482fa14bab41c1763f03a0826c5d3893b6f5cd6ef500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f6baccd860000040300473045022100b997de3d567d353743d38b4b2d8ec540611028f44d8cee5abed6cd8ef1b4a1b50220565bec73c4c2b91d14a6d434fea6d3d07ceee2a9d6079b6caf627dc7fc095f6f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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