underwatersurveys.org

Issued by R3

About this certificate

This digital certificate with serial number 04:90:68:c3:98:d5:c4:8b:34:d5:d5:e5:83:00:84:dd:5a:8f was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=underwatersurveys.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:90:68:c3:98:d5:c4:8b:34:d5:d5:e5:83:00:84:dd:5a:8f
Serial Number (int): 397589059872967856590104845741950706211471
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f3:46:27:43:ae:a8:49:47:f2:17:45:5a:9a:70:aa:b2:d0:cc:55:50
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:5c:5f:b1:1a:5e:e7:1c:2d:f3:eb:c9:7a:57:1f:2c:31:f8:da:03
Fingerprint (sha256): 8f:02:a6:31:94:6a:1d:a9:ff:f3:2f:53:af:c7:21:1a:16:b7:07:44:81:d1:04:b4:47:13:12:a5:0c:af:71:70

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate underwatersurveys.org

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for underwatersurveys.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

28radio.com
absroller.org
algorithmdeveloper.net
angolaenergy.org
bitcoinagence.org
brazillivetv.com
caymanhouses.com
chinaafricadevelopmentfund.org
connaisance.org
deeplearningguide.com
delhiorganic.com
dresdenfinance.com
entertainmind.com
footballfinance.org
fresnostudio.com
generateelectricity.net
grupobitcoinfinance.com
heavytransportship.com
hollywoodrevolution.org
illinoisconference.com
impactsociety.net
insuranceafrica.org
jazzmusicians.org
kazakhstanrepublic.com
moscowpicture.com
mythicalheroes.org
nighttrade.org
offshoreingenuity.org
paleolithicage.org
palosverdespreschool.com
performinghiphop.com
portcapacity.net
punjabiconference.com
readingdeclarationofindependence.com
rigoffshore.com
sexismandthecity.net
sexisminthecity.net
theilliad.org
troypreschool.com
underseamining.org
underwatersurveys.org
vietnamlivetv.com
www.28radio.com
www.absroller.org
www.artistpublicity.net
www.bangaloreoffshore.com
www.brazillivetv.com
www.caymanhouses.com
www.chinaafricadevelopmentfund.org
www.connaisance.org
www.continentalleasing.org
www.copyrightcinema.com
www.deeplearningguide.com
www.delhiorganic.com
www.dieselengine.com
www.edmontonstudio.com
www.footballfinance.org
www.generateelectricity.net
www.heavytransportship.com
www.hellenicshipbrokers.org
www.hollywoodrevolution.org
www.hotmaharashtra.com
www.illinoisconference.com
www.impactsociety.net
www.insuranceafrica.org
www.jazzmusicians.org
www.landesbankgirozentrale.org
www.movieworldguide.com
www.mythicalheroes.org
www.newsphoenix.org
www.offshoreingenuity.org
www.paleolithicage.org
www.palosverdespreschool.com
www.performinghiphop.com
www.portcapacity.net
www.punjabiconference.com
www.sanjuanfinance.com
www.sexismandthecity.net
www.sexisminthecity.net
www.theilliad.org
www.troypreschool.com
www.undergroundfrance.com
www.underseamining.org
www.vietnamlivetv.com
www.writingfinance.com

Other certificates including the domain name underwatersurveys.org

(limited to 100 certificates)
underwatersurveys.org
palosverdespreschool.com
www.gregchat.org
www.incombat.org
www.performinghiphop.com
www.copyrightcinema.com
deeplearningguide.com
changeisgreat.org
www.writingfinance.com
changeisgreat.org
theilliad.org
www.makechat.org
recordedat.org
www.sachat.org
changeisgreat.org
www.wastekazakhstan.com
www.dieselengine.com
changeisgreat.org
photo-chat.org
radiolatino.com
sergeidiaghilev.org
www.lagoslaw.net
www.makechat.org
www.reggaechat.org
www.gregchat.org
boogiewoogiebugleboys.org
www.shahjahlegal.org
troypreschool.com
underwatersurveys.org
www.offshoremininglicence.com
www.love-chat.org
www.blackworldaward.com
tokenizedcarbonfinance.org
www.chinacharisma.com
www.drilled.org
www.arabworldclub.com
www.dieselengine.com
wn-chat.org
congotravelguide.com
www.dieselengine.com
changeisgreat.org
carlicahnbuys.org
berlinboerse.com
underwatersurveys.org
sergeidiaghilev.org
loajanan.com
www.dieselengine.com
revolutionwholefood.com
sachat.org

Certificate

The complete raw certificate details for underwatersurveys.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUkhTUTVkvaIWmhfwD0z
6SaDRZmNLrXM3qrLMjJdB3Njy1QDYv/vwjYxqPXBd987mRW1h05LiZeFvVj4Cfaz
vGMnhInWuEYY+gKYDGM1O8205yQhRG3oxE9ADIbxq0KSuLd+yiPYWQXHKwjt21ty
VvMFsfgQwWoBVyUDTRy0hWVwcH7FBCts16rWTiPjlKaKkEIjRqnDDH6WLwzApmsA
dvVoNB7hUfWyM60wJQA3+BxMUb4z9nuQ1hWUp3cwb9Yryhw89vsgYsY73kDwJtlk
EF5rw/vvfdMErZFbF0LlG/VLlNbXqhL2tDGGHugizXwREKYH16nY+wsCLXBDIKVF
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397589059872967856590104845741950706211471
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 11:32:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 11:32:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'underwatersurveys.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20865382108492329120915865769301733011391660265524320698450141134947383614651761077399006549090155157457754666487143535577118663487537485504418156859752897114846071947044370861413718547549025765685215786926708122555129911609644250847385429022195761056605329991057992461857593039301788641256960118932630723296905229389419162340891047159184462045544454141144325082139660117207999535623737331725980913336677243759672284999968379199954231433846928312262794051576624428992928659974834965917276961825446501765096680099838965900468197460557995128174017358895906309354609184102987929275743816596508860507084978269709226296707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3462743aea84947f217455a9a70aab2d0cc5550
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1957 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '28radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absroller.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algorithmdeveloper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angolaenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinagence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazillivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caymanhouses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaafricadevelopmentfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connaisance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeplearningguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delhiorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dresdenfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainmind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballfinance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fresnostudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generateelectricity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupobitcoinfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heavytransportship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywoodrevolution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impactsociety.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuranceafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazzmusicians.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazakhstanrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moscowpicture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythicalheroes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nighttrade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreingenuity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paleolithicage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palosverdespreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performinghiphop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portcapacity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punjabiconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readingdeclarationofindependence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexismandthecity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexisminthecity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theilliad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troypreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underseamining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underwatersurveys.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnamlivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.28radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.absroller.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artistpublicity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bangaloreoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brazillivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caymanhouses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaafricadevelopmentfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connaisance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.continentalleasing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copyrightcinema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deeplearningguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delhiorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dieselengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edmontonstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballfinance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generateelectricity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heavytransportship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellenicshipbrokers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollywoodrevolution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotmaharashtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.illinoisconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impactsociety.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insuranceafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jazzmusicians.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landesbankgirozentrale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movieworldguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mythicalheroes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsphoenix.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoreingenuity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paleolithicage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palosverdespreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.performinghiphop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portcapacity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punjabiconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sexismandthecity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sexisminthecity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theilliad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troypreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.undergroundfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.underseamining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietnamlivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.writingfinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d409b3030000004030046304402202c5dddd0933e28319b4b03a896c89306f81cdb5d1532e87db54d9dec49c46756022013f97efeb62f3ad21b06456efdab4e25aa1ff7636dd1a55b0f702d6a58cd6e57007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d409b30360000040300473045022009ecd03b89ae94b966d6746a5a6b8222ce223e05d92210243a63ec4144630237022100f2195540c3c404429e49f65a5a14c693f7790f8ac3bcdde0efd8829494b3a706
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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