hydratight.ca

Issued by R11

About this certificate

This digital certificate with serial number 03:9f:c6:4c:6a:ec:2f:21:51:d2:6d:1e:dd:c9:e0:68:75:cf was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hydratight.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9f:c6:4c:6a:ec:2f:21:51:d2:6d:1e:dd:c9:e0:68:75:cf
Serial Number (int): 315705338062084468037133446650162326304207
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:3d:45:3d:cc:7e:8e:bf:07:a3:f5:3c:40:3e:d9:a4:ee:41:76:55
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): fc:33:3d:e1:4a:c2:d3:7d:74:20:b7:69:d2:8b:3c:75:04:97:c8:af
Fingerprint (sha256): 89:e1:78:74:18:c3:e1:17:c4:9d:d1:33:f4:73:bc:b5:22:33:f8:cb:93:e9:ea:c2:71:1d:f7:ff:98:87:28:ee

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate hydratight.ca

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hydratight.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

021labs.net
abilitytech.co
actuant.com.tw
athanasioslikartsis.com
bathroom-heaters.com
bcnnonline.net
beijinggold.com
bestcollegeusa.com
bhawna.in
cardiological.com
cdu.co.in
colossic.net
connectinghearts.in
coshoctoncounty.com
dhj.co.in
dirtrader.com
dspodcast.com
faithlongview.net
gogreenworkshops.com
golaboff.com
graniteworld.in
guruonly.com
helmetcameras.org
hemppellets.com
hempsolarenergy.com
hydratight.ca
jrhenline.info
kakaducomplex.com
kamiwear.clothing
lawsuitadvice.com
love2hempyou.com
lovemail.in
markclancey.com
mcdanielsacuraofcharleston.com
memewarfare.org
metaaunty.com
mnmeetings.statenationals.us
mybookshop.in
myjeans.in
neobead.com
nextquoting.com
patchwork-heart.net
playlistparty.net
plugintruck.com
profitvideos.com
profound-strategy.com
puppybasics.net
radioactivetechnologies.com
rarecollectibleplates.com
realestateagentdomains.com
rxsugar.net
sacouncilelections.com
safesextour.com
sanantonio-seniors.com
sanpetecountyhomes.com
seacontainerhomes.net
showignition.com
slavery.bible
socalsprinters.com
spenceslist.com
strongcoach.mardukmethod.com
summons.co.za
swarmbox.us
thebannerexchangenetwork.com
thegothikcoffin.com
tigerhill.us
timemachine.in
topshelfhemp.com
usaprecision-firearms.net
ustaxforms.com
vaccinedeaths.net
vivosity.com
webstpete.com
worldnewspapers.co
www.highscale.org
www.moltensaltbattery.com
xn--xs8ha.ws

Other certificates including the domain name hydratight.ca

(limited to 100 certificates)
hydratight.ca
hydratight.ca
bramptonhomebuyers.ca
hydratight.ca
hydratight.ca
hydratight.ca
hydratight.ca
hydratight.ca
hydratight.ca
medicusshop.com.34725625397.ca
hydratight.ca
www.hydratight.ca
hydratight.ca
ticketsdirect.ca
hydratight.ca
medicusshop.com.34725625397.ca
virtualblackbook.com.finland.biz.hydratight.ca
westernaesthetics.com.hydratight.ca
bramptonhomebuyers.ca
bramptonhomebuyers.ca
hydratight.ca
www.hydratight.ca
hydratight.ca
hydratight.ca
f1xed.com.hydratight.ca
hydratight.ca
www.hydratight.ca
hydratight.ca
hydratight.ca

Certificate

The complete raw certificate details for hydratight.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qkNOie1qgzEZwbsCEUO
34SQa1lMliUabG5T5n+i5qP3BeMDdHUW+pygZKJZrQY6Fb82YdBzWQnGaXUuYvNQ
eET3qsP0ZcgixrB2C7RuJSdPCLT9IZF6KNtA+jl7kARo31OUKZ1LHzDV8QJkCPwX
Ssfps+Askhtzp7u6jU2DWOvhqlvoXoRgbfkB23GMwpfpIgeAjCXs6JQOwTtz5scz
Z7TLjE5+BqQWy19xPQfpIVsiZT6SY/lCYzMXf5iaa1b/x5nqhw8sd/Xw9pNRzyj/
3REIpqVNhf5uWm+poLcIS/8uhE5DQ6+jrSStp5J/d08LQ5fSjFraPeRvjEZS9xgz
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315705338062084468037133446650162326304207
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 13:10:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 13:10:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hydratight.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26593406527634464355005947696246444866641135581911619214741794957671289161168759301668588908954045302771366411533639352774522110881944207039233487173910920542992078070277303335497852443631212773442733143927662918391872746752149965227567968469876412946865566807578483642319010565801474375789249803893071380730500575398433635482526880190374426531713911511390175018340603749416583712514781338374639355738044281305190504419766054883969406096604855602898564822103775887287661439754744233681681122812122934256964275292319013687692636458874940818635720110230572366586308701992731411831123437060382139474791273052481181463423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							573d453dcc7e8ebf07a3f53c403ed9a4ee417655
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1439 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '021labs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abilitytech.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actuant.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athanasioslikartsis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroom-heaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcnnonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beijinggold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcollegeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhawna.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardiological.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdu.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colossic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectinghearts.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coshoctoncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirtrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dspodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithlongview.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogreenworkshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golaboff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graniteworld.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guruonly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helmetcameras.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemppellets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempsolarenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydratight.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrhenline.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kakaducomplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamiwear.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawsuitadvice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'love2hempyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovemail.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markclancey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdanielsacuraofcharleston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memewarfare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaaunty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnmeetings.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybookshop.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjeans.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neobead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextquoting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patchwork-heart.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playlistparty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plugintruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profitvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profound-strategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puppybasics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioactivetechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarecollectibleplates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateagentdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacouncilelections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safesextour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonio-seniors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanpetecountyhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seacontainerhomes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showignition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slavery.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socalsprinters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spenceslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strongcoach.mardukmethod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swarmbox.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebannerexchangenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegothikcoffin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigerhill.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timemachine.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topshelfhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaprecision-firearms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustaxforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccinedeaths.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivosity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webstpete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldnewspapers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highscale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moltensaltbattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--xs8ha.ws'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff30904cd0000040300473045022003ccd0d95c9c56dc823ec41145937873db5f261fad9a9961d8b2e9565149f1090221008d777f5af9d6663cfec66e369060d2811b3752c4f653007d5a9d53e489c69a460076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ff3090595000004030047304502207cf3a12f1f96538eb7c2be74cc4781c1cff8cc63eca31dbd4cd7f96551ae1402022100820f4588a380e3c768ca3657e5bcafede8cdcf90e7997805021e418471c4ec76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00599f3b9d387c41fa5b227b23c54b5d6b3b1124a6b2b7de7ddf758508d526ee97d647755db8cab3fc8a0ab3d2430fbd61f439c71041a2dcd0c1772504752cfd62c5ed41cd31a269873a2d7963f53a51eb9bb0a47e50eb25b04a99605e0db17ee7fc5d72ab908b0ee24a2099fed67ef963f481986d816b08b882060dd75da9509cab3725aa3a706859679030c2c64422fe45f75eb38d192952373ffa680d66f150148176bab1a78ad5ddb23fc358bc86c5ccbcc16bb16b353f03a809a95191775d1a356682c6688245cbc118e00e7dc98531556c0ead1d96ba32210494778542d58850f0faa2664e37e38fa31dfd902ead7eea1c789b4f4a03c3f1b0b500638e6a