cranebarge.net

Issued by R3

About this certificate

This digital certificate with serial number 04:9c:92:1a:cc:b1:05:6a:21:b9:ea:c7:3d:3e:ad:4c:4d:32 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cranebarge.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9c:92:1a:cc:b1:05:6a:21:b9:ea:c7:3d:3e:ad:4c:4d:32
Serial Number (int): 401727399405446926150163533654723868249394
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 68:c6:50:31:b8:90:df:90:69:2e:c8:f7:ce:88:8f:4a:6d:86:ba:89
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:81:ea:77:f4:2d:30:29:c4:b3:05:53:ff:34:7b:92:49:2e:7d:bb
Fingerprint (sha256): 88:80:ea:45:a8:9e:f0:b0:74:23:83:b3:40:7a:ba:10:8e:38:a8:33:22:04:e8:a4:f3:2f:ea:bd:6b:81:94:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cranebarge.net

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cranebarge.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

19thcenturywritingdesk.com
abudhabiglobal.net
acceptchange.net
alaskadaily.com
antiquewritingdesk.com
bankingmerchant.com
bermudaoffshore.net
bigsurenergy.com
braziliancook.com
brisbaneartist.com
cranebarge.net
czechrepublictv.com
defencesecretary.com
defencework.net
defensework.net
dentistalarm.com
digitalmetalxchange.net
digitaloilxchange.net
documentarycanal.com
farsilovestory.com
filmsreview.com
guidemerchant.com
hydrogenclinic.org
interactivexchange.net
iraq-daily.com
lapazattorney.com
macphotoeditor.com
malaysiadj.com
menloparkdaily.com
mineral-drink.com
muhldorf.com
offshorecoinexchange.net
offshoresubcontractors.com
onlinepersonal.com
osloattractions.com
pariscitizen.com
parishotelsin.com
parissoul.com
publicnatural.com
punnvorr.com
reykjavikscholarship.com
romanticcabins.net
saudiimmigration.com
scandinaviancouncil.com
teamfiduciary.com
tobaccostory.com
tokencyber.com
wavepowerplant.net
www.19thcenturywritingdesk.com
www.abudhabiglobal.net
www.acceptchange.net
www.afrosolar.net
www.antiquewritingdesk.com
www.bankingmerchant.com
www.bigsurenergy.com
www.cinnamonchallenge.net
www.cranebarge.net
www.defencesecretary.com
www.defencework.net
www.defensework.net
www.digitalmetalxchange.net
www.digitaloilxchange.net
www.documentarycanal.com
www.farsilovestory.com
www.filmsreview.com
www.guidemerchant.com
www.helsinkischolarship.com
www.historydream.com
www.hydrogenclinic.org
www.interactivexchange.net
www.investigativesystem.com
www.iraq-daily.com
www.lapazattorney.com
www.macphotoeditor.com
www.mediavacancy.com
www.menloparkdaily.com
www.mineral-drink.com
www.nftantiques.org
www.offshorecoinexchange.net
www.offshorehawaii.com
www.onlinepersonal.com
www.pariscitizen.com
www.parisgrandhotel.com
www.parissoul.com
www.pereiratv.com
www.privatebankcrypto.com
www.publicnatural.com
www.punnvorr.com
www.saudiimmigration.com
www.scandinaviancouncil.com
www.teamfiduciary.com
www.tidalcurrents.net
yshanghai.com

Other certificates including the domain name cranebarge.net

(limited to 100 certificates)
yshanghai.com
wavepowerplant.net
casinopanamacity.com
wavepowerplant.net
offshoresubcontractors.com
blige.net
maliburidge.net
billsofexchange.net
defencesecretary.com
www.gmochallenge.net
www.onlinepersonal.com
www.irresponsibleregimechange.net
www.guidemerchant.com
columbiaexchange.net
www.cranebarge.net
gmochallenge.net
www.marineemploy.com
hydrogenclinic.org
www.wnchallenge.net
www.palestineenergy.com
breakwaterbuild.com
www.maliburidge.net
www.interactivexchange.net
antiquewritingdesk.com
columbiaexchange.net
www.bigsurenergy.com
maliburidge.net
www.helsinkischolarship.com
www.columbiaexchange.net
www.lngexchange.net
www.wncollege.net
intercoinexchange.net
blige.net
albertaexchange.net
www.iraq-daily.com
19thcenturywritingdesk.com
www.urlfuding.com
cranebarge.net
billsofexchange.net
www.antiquewritingdesk.com
www.urlfuding.com
utopiadaily.com
www.wnchallenge.net
telavivstockexchange.net
www.mediumofexchange.net
utopiadaily.com
www.guidemerchant.com
hydrogenclinic.org
19thcenturywritingdesk.com
www.worldgmochallenge.net
www.lapazattorney.com
acceptchange.net
19thcenturywritingdesk.com
www.intercoinexchange.net
jerusalemdaily.com
cranebarge.net
intercoinexchnge.net
www.mineral-drink.com
www.documentarycanal.com
www.punnvorr.com
www.tidalcurrents.net
teamfiduciary.com
blige.net
blige.net
wnchallenge.net
allhumanityknowledge.net
worldartcollege.net
19thcenturywritingdesk.com
www.acceptchange.net
publicnatural.com
muhldorf.com
yshanghai.com
defencesecretary.com
parissoul.com
www.guidemerchant.com
www.cinnamonchallenge.net
www.guernseyattorney.com
www.videoeadxchange.net
colombostockexchange.net
braziliancook.com
cranebarge.net

Certificate

The complete raw certificate details for cranebarge.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OiMTY1pedhjgUy+GozT
WEpKA1KIXXMzDLa649P1UDu0x1+rN5XXbf9+Ad+LKrTrJsuhQdZQCtg+sNMyhSfo
g4mtGWr0AeQ3FvKlu+jSFD0kSJ9GUMpb4hGowdWN8LJf9o4J72WYW0t6HlCxVlUs
63W6cmXfzzGBBhz7oGgK2K7wiuTQdTkAavY8W6egMSkh0kz5iOBSCjzszqbve1JF
hgit2Zt/y6lP9UIqaKXSql/po9jofn+YzxEcfbQiB77qHt3s/y9MFZqQJTKW345r
mn5zB11asYm2fbbLaYiEJepTlS3ALA4h9cdfSwSAh0j5qOXMbRR8pu5Xtuiom8aV
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401727399405446926150163533654723868249394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 11:37:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 11:37:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cranebarge.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30411866913377332386185122692256130807285799766672091472014892391950705485675882636260463927046188960108047409614027664355290987151303108165803651967182801718978636986809328116875289312527325579538350127469345408488144856287977601670083886537422653101254439302244420762036522933492438776041754378436996185215543009452827126365869280231647835206332494689191664317771081037374435786825136096208225097013041673891085583663828130228556682046662976590864317339659336102045775377322695240155561787939757992138793919636675383575333793911424566015246209442792566506178976950529593653357853816545860569025874429356902271325597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68c65031b890df90692ec8f7ce888f4a6d86ba89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2034 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '19thcenturywritingdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abudhabiglobal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskadaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiquewritingdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingmerchant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudaoffshore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigsurenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braziliancook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisbaneartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cranebarge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czechrepublictv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defencesecretary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defencework.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defensework.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistalarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalmetalxchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaloilxchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentarycanal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farsilovestory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmsreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidemerchant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrogenclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactivexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iraq-daily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapazattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macphotoeditor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malaysiadj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menloparkdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineral-drink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muhldorf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorecoinexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoresubcontractors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinepersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osloattractions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pariscitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parishotelsin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parissoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicnatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punnvorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavikscholarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanticcabins.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saudiimmigration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scandinaviancouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamfiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tobaccostory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokencyber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavepowerplant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.19thcenturywritingdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abudhabiglobal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acceptchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afrosolar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antiquewritingdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankingmerchant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigsurenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinnamonchallenge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cranebarge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defencesecretary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defencework.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defensework.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalmetalxchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitaloilxchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.documentarycanal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farsilovestory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmsreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidemerchant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkischolarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historydream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrogenclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interactivexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investigativesystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iraq-daily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapazattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macphotoeditor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediavacancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menloparkdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mineral-drink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nftantiques.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorecoinexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorehawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinepersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pariscitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parisgrandhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parissoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pereiratv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankcrypto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicnatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punnvorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saudiimmigration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scandinaviancouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamfiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tidalcurrents.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yshanghai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c6d7bc3290000040300483046022100b72d06c19c701c9a0ef9b2ae74578c495e3bb298bca99a05ced003dad6ab29a2022100afc50f83eace5ec112efb2e9191cd743aff965b5de315758a7511f0ca994e5a500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c6d7bc33300000403004730450221009ebfe2dcc93c1e4e3f49f1f258838a7c8ec7f268c9d143bb605d0e04e9b7ceab02203913a77f6c27acb5228dbfd76bb81683e9c1801544bfde89f619e8aeb9bb6c8c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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