barbkops.ca

Issued by R11

About this certificate

This digital certificate with serial number 03:17:f6:fd:f6:0e:25:cf:16:29:8f:9e:f8:2a:6f:6f:ac:78 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=barbkops.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:17:f6:fd:f6:0e:25:cf:16:29:8f:9e:f8:2a:6f:6f:ac:78
Serial Number (int): 269491660963124281286831072356053497654392
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:6f:0e:fd:37:0a:5c:7b:55:50:7d:2a:9a:31:8b:27:8d:68:75:72
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 56:e5:45:49:e4:28:7e:ff:78:17:b8:00:82:6d:95:29:a6:12:ec:8d
Fingerprint (sha256): 87:d3:b5:49:38:03:a9:15:a6:b8:0a:44:20:b9:6f:68:e5:35:5d:3b:ad:bf:83:d6:13:1a:8d:21:6b:46:50:fb

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate barbkops.ca

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barbkops.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aikenzo.com
albertavaccinepassports.com
albertvillerealestate.com
andrewbernard.org
appletonengraving.com
arcac.com
australianselfsabotagecoach.com
barbkops.ca
barroncountyrepublicans.com
bdutv.com
brent.buzzank.com
burnsharbor.com
bycyoga.com
carbonoffsettrader.com
charlottesuburbs.com
containershomes.com
crypticgames.com
dodonov.com
dumptruckdepot.com
ethosdental.in
faithmeetslife.com
flanaganfilm.net
flirtingdate.com
fredtblanton.com
freespeechsociety.org.uk
frontmetal.com
gemalings.com
glassartisans.com
glucosescore.com
goafricafestival.com
groenendyk.com
hempwalls.com
homelifeacademy.org
homeschoolgapyear.org
homeschoolpersecution.org
houstontexasresidentialconstructioncompany.com
iabs.kimkazaka.com
ignitethewealth.com
indeed.vc
jamiewimer.com
jamwithjesus.org
joinsci.org
lgbtqtixs.com
lionslandscape.org
mainemetalroof.com
maplegrovelawncare.com
mondiaal.com
morenzato.com
new-braunfels.com
orlandocompost.com
paulohleocadio.com
powercounty.com
privateinvestingcoach.com
punishers-customs.com
qavloical.com
rantexchange.com
rencontrenice.fr
reset-refocus-recommit.com
rockerssoftball.com
sentonesnetwork.net
shopalcoholic.com
sportishqiptar.com.al
stonesrulesbook.com
systemengineer.cloud
systemizers.com
thecoachinginstitute.org
thereadyroom.com
ticketsbytext.com
titleinsuranceattorneys.com
topsanantoniorestaurants.com
us10y.com
usergo.com
virusesrevealed.com
whitehatforum.net
wingaterealtor.com
www.accessmasters.com
www.gravityenergystorage.com
xdd.co.za
xespo.com
youmeandfrance.com

Other certificates including the domain name barbkops.ca

(limited to 100 certificates)
talesoflegendia.com
biblecourse.ca
barbkops.ca
cpmfg.xyz.barbkops.ca
1488.ninja
www.cizgitasarim.com
5272653.ca
certifiedcard.com
www.aimanager.ca
lymedisease.clinic
altrightsreserved.com
barbkops.ca
www.hoperecovery.org
propholdings.co.za
www.bonafirerecords.ca
barbkops.ca
barbkops.ca
bugrepellent.organic
barbkops.ca
barbkops.ca
tecklogic.com
allanblock.on.ca
www.merrijuanachristmas.org
barbkops.ca
getabetterjob.ca
barbkops.ca
arbitragefund.ca
www.ebola.place
webchannelid.com.barbkops.ca
theorganicway.com.barbkops.ca
barbkops.ca
barbkops.ca
cojac.com
reicore4.com
barbkops.ca

Certificate

The complete raw certificate details for barbkops.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tm9sfYQAGO1UBYTRvHx
FPRrIJ+ZsHissFkkVB36QWxWEEVyBdS0tURC7DuPunZfBD9X+hNajg3TAj2ZgF3H
QBCZz4ULeNiPygEImSWDZHZxDaxPbXvP+jj8/VXqiLZpevz2my9yNq9Psc+VV24D
QkrfsPxUkJgYwh/DkbD8MtSIcnIx2ZemkMJUMtxJ6nuY2YP9nka8BgQ+u7Acqwya
r4EgL4Qzt7Pyy4xMnPf4phfb4oL3Qr7drVkWXdlp70IF78wmB0p4PnQMF+MQZWP/
2h/o5L0f82wSKvAwU53WwZbMDphfTvbzBungK4aX8GTk7gi4l/oH15zOQrQJldu+
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269491660963124281286831072356053497654392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 01:29:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 01:29:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barbkops.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26617416130168490796952644092403205360575106799181977523884676261182425435162363556920570767693351471513057964439687473248641948441699132627653698877289164707908560659158211815567410443135734405905240106721256132789392760516539063111287589810564083665770082951590001227279125088354054622312355922851244552246923003256575313890216237189202386815467483401430303666492423243172925635704908360038377384077332528056490313953388433489144778002309280751223309905242407098521781534311110321631391288610074315204142100284144455593549276475742792116063497126503097307274610223707405880438996280000899201056467914193754996326121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							426f0efd370a5c7b55507d2a9a318b278d687572
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1591 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aikenzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albertavaccinepassports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albertvillerealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewbernard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appletonengraving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australianselfsabotagecoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbkops.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barroncountyrepublicans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brent.buzzank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnsharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bycyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonoffsettrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottesuburbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'containershomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crypticgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodonov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumptruckdepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethosdental.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithmeetslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flanaganfilm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flirtingdate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredtblanton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freespeechsociety.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontmetal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemalings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glassartisans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glucosescore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goafricafestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groenendyk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempwalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homelifeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolgapyear.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolpersecution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstontexasresidentialconstructioncompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iabs.kimkazaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ignitethewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indeed.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamiewimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamwithjesus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinsci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqtixs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionslandscape.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainemetalroof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maplegrovelawncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondiaal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morenzato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new-braunfels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlandocompost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulohleocadio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powercounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateinvestingcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punishers-customs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qavloical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rantexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontrenice.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reset-refocus-recommit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockerssoftball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentonesnetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopalcoholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportishqiptar.com.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonesrulesbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systemengineer.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systemizers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecoachinginstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thereadyroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsbytext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titleinsuranceattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsanantoniorestaurants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us10y.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usergo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virusesrevealed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitehatforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wingaterealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gravityenergystorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xdd.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xespo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youmeandfrance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001905260a83a0000040300483046022100c4565c7482b0a86152cd463ebd323ad6e1919a5f629a6d9ac7e209ed08ec18d3022100b99ef0736c1f37cbb7ffc7cb5b2c926c43bdfa16c39b44ec7b3500e178b15825007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c000001905260a8ab0000040300473045022100cbef54d7857006077021ff99f8a619a9a95227936b54c7b5ac1a6b838ccbac3b0220555138f95cbf15ed2619c0e876959e986b752135ae6ecc5e51da99aa5da4d485
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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