arizonamagazine.com

Issued by R3

About this certificate

This digital certificate with serial number 03:01:4f:a8:4c:81:de:fb:9b:e3:3c:fc:39:80:a9:0a:2e:30 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=arizonamagazine.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:01:4f:a8:4c:81:de:fb:9b:e3:3c:fc:39:80:a9:0a:2e:30
Serial Number (int): 261783023031493493298922790843001468497456
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:db:96:82:d5:f4:0b:1f:03:ad:dc:47:2c:6d:49:aa:f9:39:37:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:86:7a:6e:d2:54:13:c0:61:c6:ba:d0:be:bd:d9:77:4f:04:55:85
Fingerprint (sha256): 89:82:92:7b:f3:85:88:f7:d9:ac:72:db:4c:eb:54:bc:44:83:86:64:a8:0e:7c:be:d3:6e:3c:79:48:1e:58:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate arizonamagazine.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arizonamagazine.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1800contavts.com
*.20centpixels.com
*.absolutelyfabuloushair.net
*.alljewelsofhealth.com
*.arizonamagazine.com
*.attendance.site
*.avanishrai.com
*.buhsd.com
*.cafefusionarcadia.com
*.chicagocarsalesinc.com
*.chinainnri.com
*.daisypearlboutique.com
*.deseretfirstcreditunion.com
*.duluthtraders.com
*.elriceandbeans.com
*.forestallaramainmobiliaria.com
*.foxnewsc.com
*.gardenangels.com
*.glaber.com
*.goinwiththeflo.com
*.healthyfoodcentar.com
*.lead-media.pl
*.mydreamgoal.com
*.napolimanianj.com
*.newhampshirites.com
*.nirvanapetspa.com
*.nordstromm.com
*.normanpublicschools.com
*.nybagelsinphiladelphia.com
*.omahadealdiva.com
*.rayswheels.com
*.remddit.com
*.richmondvirginiahomesforsale.com
*.serenityspalife.com
*.sickofcancer.com
*.sidebar.site
*.signbase.com.au
*.staellium.com
*.stevesbugoffexterminating.com
*.stuartcarwashanddetail.com
*.suanovarenda.online
*.sublimecoloradobodymodtattoo.com
*.talrntlms.com
*.tavernatrela.com
*.telcel5gexperiencia.com
*.ticketjam.com
*.tptheraphy.com
*.urologicconsultantsepa.com
*.waslot.co
*.westminsteralf.com
1800contavts.com
20centpixels.com
absolutelyfabuloushair.net
alljewelsofhealth.com
arizonamagazine.com
attendance.site
avanishrai.com
buhsd.com
cafefusionarcadia.com
chicagocarsalesinc.com
chinainnri.com
daisypearlboutique.com
deseretfirstcreditunion.com
duluthtraders.com
elriceandbeans.com
forestallaramainmobiliaria.com
foxnewsc.com
gardenangels.com
glaber.com
goinwiththeflo.com
healthyfoodcentar.com
lead-media.pl
mydreamgoal.com
napolimanianj.com
newhampshirites.com
nirvanapetspa.com
nordstromm.com
normanpublicschools.com
nybagelsinphiladelphia.com
omahadealdiva.com
rayswheels.com
remddit.com
richmondvirginiahomesforsale.com
serenityspalife.com
sickofcancer.com
sidebar.site
signbase.com.au
staellium.com
stevesbugoffexterminating.com
stuartcarwashanddetail.com
suanovarenda.online
sublimecoloradobodymodtattoo.com
talrntlms.com
tavernatrela.com
telcel5gexperiencia.com
ticketjam.com
tptheraphy.com
urologicconsultantsepa.com
waslot.co
westminsteralf.com

Other certificates including the domain name arizonamagazine.com

(limited to 100 certificates)
*.21stmortgag.com
arizonamagazine.com
vidmeo.co
vidmeo.co
buhsd.com
normanpublicschools.com
arizonamagazine.com
arizonamagazine.com
arizonamagazine.com
xn--r3crbz5a6at.com
baltimor.com
myanmaids.com
arizonamagazine.com

Certificate

The complete raw certificate details for arizonamagazine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261783023031493493298922790843001468497456
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 10:51:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-21 10:51:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arizonamagazine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795170538998696114972474473873625347352290369805149715551735906256491777193444994643718092868820315968188412538948629386999887318296093960376300805113183470236754818293825111310773771509057826377786565955896044218321254737186343094327905543998459652956261698349815800683167950108605647582223560276585056472399734418964485260868457896125107004325480694834705677533525238363001029619580292002527536447125181367702689176283822425018003053006964808555865596301580600239351253757251661007615859008936971996189584414482606146909835960917527992991580856551347849576205908615140488564384882082314773824826842890152261648583907782216669895129954122959205049438989447879271110594264025257403583514860536374179615829644213379925610204346352372347579644403181927853160026713333941360736098365819697173069169132247930684480741191401534944659830477591144817821803315289624680670730085529377682859638909906103797977752812502664880574302886650913303600448388737159278322749107949080455896164788931001647808092137218515591994905760032189526472375797033662246664433290710835913197500621910755078679602875855642997306187173145772464914456380405073929389704504254826861739843853455968109092621010680452349759912443884774787423214379581217325580051498293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0db9682d5f40b1f03addc472c6d49aaf939372c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1800contavts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.20centpixels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.absolutelyfabuloushair.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alljewelsofhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arizonamagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attendance.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avanishrai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buhsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafefusionarcadia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicagocarsalesinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinainnri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daisypearlboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deseretfirstcreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duluthtraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elriceandbeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forestallaramainmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxnewsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gardenangels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goinwiththeflo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthyfoodcentar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lead-media.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydreamgoal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.napolimanianj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newhampshirites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nirvanapetspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordstromm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.normanpublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nybagelsinphiladelphia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omahadealdiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rayswheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remddit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.richmondvirginiahomesforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serenityspalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sickofcancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sidebar.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.signbase.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staellium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevesbugoffexterminating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuartcarwashanddetail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suanovarenda.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sublimecoloradobodymodtattoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talrntlms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tavernatrela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telcel5gexperiencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketjam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tptheraphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urologicconsultantsepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waslot.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westminsteralf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1800contavts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20centpixels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absolutelyfabuloushair.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alljewelsofhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arizonamagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attendance.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avanishrai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buhsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafefusionarcadia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagocarsalesinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinainnri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daisypearlboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deseretfirstcreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthtraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elriceandbeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forestallaramainmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxnewsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardenangels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goinwiththeflo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfoodcentar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lead-media.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydreamgoal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napolimanianj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhampshirites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvanapetspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordstromm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'normanpublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nybagelsinphiladelphia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omahadealdiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayswheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remddit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondvirginiahomesforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serenityspalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sickofcancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidebar.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signbase.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staellium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevesbugoffexterminating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuartcarwashanddetail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suanovarenda.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sublimecoloradobodymodtattoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talrntlms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tavernatrela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telcel5gexperiencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketjam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tptheraphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urologicconsultantsepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waslot.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westminsteralf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fa54af89d000004030047304502204ad8939ba0060628bc9dff57823ef8b6754bfb0d8b4628cc65527f9d55f32a08022100ac061517cc1b7d2a7747099bf6f94a2737af8f0985136f991ceaf3ecf8700df600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fa54af8f3000004030047304502203e9a237204f67fba36446c03fd494bc260fd7b7e0f8713928f3a2f8e639848850221009981c4efaf6320eef01bfcd0f4e3e7066e827823fe5ec5aeaf5bd770a83cd8aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b5640fe2e39db38f3d7dd3106462d7bee51c266037a7e39761d158d452e9d6b88ba4bfd5fb2d4f246f914adba3d257b7325cb45acb3a393c583edfc230cef864d30eeb6bf59b18d44436eeeff5647ded550fe95bd26fd360ba4cf5b89de3ff069abee5a19eb6784becb123c51cb26246834663afebfa32f532af21e6661e395831fe86b9000d2e3fbf0b2e97c354a29f6d3a492a11284e34e6df4257a8e54a97c4f7308f0b576dd275fcd9e309df21d789939c27243f5817e1056b0526ece97d58de65bf423f0354b1a68f728bbedaae028c0b657e7d45426498979387c5f83c427dacdca2cd7a47c550f42059ce148c1991928f84aff7d52400d488e6f5b70e