nfwaterworks.ca

Issued by R10

About this certificate

This digital certificate with serial number 03:79:f2:53:28:e6:74:c2:30:90:aa:17:e2:5b:14:9c:45:6a was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nfwaterworks.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:79:f2:53:28:e6:74:c2:30:90:aa:17:e2:5b:14:9c:45:6a
Serial Number (int): 302833129157888498597313990055211109729642
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:7a:58:98:31:03:75:0d:bf:67:9b:70:11:59:0a:7b:82:b1:0b:35
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 7d:cb:f8:03:d5:97:36:6c:15:ad:ea:9a:b7:0e:83:19:b8:b8:de:2d
Fingerprint (sha256): 89:dc:3b:bb:81:da:0d:1e:61:50:c1:c7:57:27:74:aa:de:13:54:20:3a:b1:95:8e:da:ce:05:18:62:ad:17:30

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate nfwaterworks.ca

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nfwaterworks.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

021labs.org
603chiropractic.com
aaaphx.com
adrattorney.com
alexblak.com
arbitragefinancing.com
atlantahomeimprovements.com
bigboardovecesko.com
californiaduiautoinsurance.com
cannabisbricks.com
charlotteconventioncenter.com
china.istlm.com
christiandoctrine.bible
classiccollectiblecars.com
clickabledomain.com
dilloncounty.com
discoverylegal.com
dumptruckparking.com
dwiautoinsurance.com
dyvergpress.com
faithbaptistog.org
freedecisionpackage.com
frisul.com
fructoseistherootcauseofobesity.com
funacre.com
furnacecompany.com
georgiadogsticketsales.com
glassartisans.com
graciecollectibles.com
grantcity.com
haircutatwork.com
hempknowhow.com
hertfordcounty.com
hitchat.com
holothing.com
homesonparade.com
househackingusa.com
ideapedia.com
imdesigner.com
jiguani.com
jimrosemary.com
jrp.vc
laentertainmentlawyer.co
legalbuy.com
lightfarmstudios.com
lotterygreencard.com
maineantiquestore.com
matinicusisle.com
meethub.co
megabetter.com
melpomene.com
microfinance-network.com
military-biodefensevaccines.com
moto-junk.com
nationalchristianhomeschoolleader.com
nfwaterworks.ca
nmgmgmt.com
nonprofitbooks.com
oilcotech.com
originalssneakers.com
ournextmayor.info
page1guaranteed.com
pawneecounty.com
perfectpods.com
pinetreega.ng
pjwmerch.com
plainseaglecorp.com
ponzischemeblog.com
portraitsbyrobert.com
psychicjessica.com
reginaangelorumpress.com
roadto50racing.com
royette.com
rxsugarcereal.com
rxsugarsolvesforsugar.com
rxsugarsymbiotics.com
shipsoflepanto.com
showlance.com
sirifort.in
sonic-mop.o3technologiesinc.com
spicelux.com
strengthexercise.com
texaswomancalendar.com
theconsumersactionplan.com
thedirectlenders.com
thelasrnation.com
ticketslgbtq.com
tylerstipeteam.com
usparalegal.com
veatamin.com
videos.raahijogani.com
webuypropertyfl.com
westernaustraliastateelections.com
winshoppers.com
wpjot.com
www.animaluseprotocol.com
www.carloszada.com
www.lastchancefitness.com
www.volatileorganiccompound.com

Other certificates including the domain name nfwaterworks.ca

(limited to 100 certificates)
cochranebikerepair.ca
nfwaterworks.ca
centralfloridacountryproperty.com.nfwaterworks.ca
ssl-cxlmf.epik.to
nfwaterworks.ca
nfwaterworks.ca

Certificate

The complete raw certificate details for nfwaterworks.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0piFWFaT6gBgQC+wK8N
F9uw2ri9BIVlrPLbwrMfcIiPHaEo6jsHSHMO2WGgvYoeELDmco+zyQJypKq/Ztq1
NMGizXSIB0/Y5+1HiXSxPP0JTjbGBUhHLdoNluHyq2Fjme99WcimR3KhSk5kpQlc
6Jda+qHGK5iE7zwhQlB3gPU4BVK/o8sVw84XBzvXoa8fzT6cVkiFC8Z1b+XTX/zD
61ITslcka+zQiTnONVL9dTNSHt12brP4x5RpgoJM+YKMqyPIA7g4B/AUR1d3UyHr
fan39vezaUnihoAUXUYtpCS86RnxwGi55J+OVqA32L8DODloQcLCyI36QDVwgXbC
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302833129157888498597313990055211109729642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 08:21:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 08:21:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nfwaterworks.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26168008820756343283491845915690897405050543806708323375383387214644185410951939566072497695980031657866594420290673332253840396659063322599758161657995025687064817344822129741936013224993143041947710311635497910667527124942652400573912280821110082032011054747971870378455048492739711819992697712086810595099787094423707081115316723198135198376152661136974668079029842822172620259017425779344473863078308357979773033808802249191677834728270797374184298492032712905143094534067334943735792485850307767993692164001923166181186786368807062001346291617690157474697683442595687286786956441426681064253202096977937041900237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc7a58983103750dbf679b7011590a7b82b10b35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2017 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '021labs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '603chiropractic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaaphx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adrattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexblak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragefinancing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantahomeimprovements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigboardovecesko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiaduiautoinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisbricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlotteconventioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.istlm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christiandoctrine.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classiccollectiblecars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickabledomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dilloncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverylegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumptruckparking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwiautoinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyvergpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithbaptistog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedecisionpackage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frisul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fructoseistherootcauseofobesity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funacre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furnacecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiadogsticketsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glassartisans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graciecollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haircutatwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempknowhow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hertfordcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesonparade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'househackingusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideapedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imdesigner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiguani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jimrosemary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrp.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laentertainmentlawyer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightfarmstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotterygreencard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maineantiquestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matinicusisle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meethub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megabetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melpomene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microfinance-network.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'military-biodefensevaccines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moto-junk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalchristianhomeschoolleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfwaterworks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmgmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprofitbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilcotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originalssneakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ournextmayor.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'page1guaranteed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawneecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectpods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinetreega.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjwmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plainseaglecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponzischemeblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portraitsbyrobert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychicjessica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginaangelorumpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadto50racing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarcereal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarsolvesforsugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarsymbiotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipsoflepanto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showlance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirifort.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonic-mop.o3technologiesinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spicelux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strengthexercise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaswomancalendar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theconsumersactionplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedirectlenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelasrnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketslgbtq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tylerstipeteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usparalegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veatamin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.raahijogani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webuypropertyfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernaustraliastateelections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winshoppers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpjot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.animaluseprotocol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carloszada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastchancefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volatileorganiccompound.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff20093e70000040300483046022100847f94abd9eea4e9e6f2efeb3dad21e0961143d069af87a93256d2540b79fb26022100fcfb01cd9e44306afed3a4b2e8f641b93f6de0c923e97580d7a52f603475e9eb007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ff20094ac0000040300473045022100ec9ce2841711de59ff70b8b0da410408f72990b4d8a4680c48dd00e6fa3310b502202a8138693823cb4a6c5167cc6893e0f987820787cb6ddb835e9023168782d1ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007aac1353cf76b7085c2d345deb2365fec3be712f3737efc7274f9533b73c0609b3afc5e288610b4fca55ce5691bccc21a2622f06afdfcd47f4b6b4d6307e9346dd7a1b0d7172e35d9cc1a879eacbdf1e9bbf8a320d5cc0d969309a3e71ea444c525f15d421740e6181fac25efe596136c4ecdd6eae670fc1bc7b51f26707e9db1ed047dd7455deb6c5b38e12d7d0ec8cf6aae7f7f6acc6e390271135d9bc0c4d8215d3a7ce4d3ed36904986a8e4a3e0af604a2a763617a0882006447afb35869e8a0aa86c4f04638f59b0e0aea8f656cb04b06a9ebdf9b89fcc79cebb58189675880351a520b385f5c3295c7058f0c8e8851212c2b13effc0a8978a6267b77fc