news.so

Issued by R3

About this certificate

This digital certificate with serial number 03:52:39:8f:fb:55:09:8f:c6:b5:73:27:45:a6:1a:88:be:e8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=news.so

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:52:39:8f:fb:55:09:8f:c6:b5:73:27:45:a6:1a:88:be:e8
Serial Number (int): 289316525474630368139112877247165199073000
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:75:ae:fd:a5:80:31:3c:cc:f9:60:ba:e4:50:21:8d:8d:35:71:ea
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:3c:57:36:a1:3d:ef:7a:d8:bd:31:ea:db:44:97:72:56:69:45:ca
Fingerprint (sha256): 8f:cb:9b:dc:de:e6:80:2f:56:37:af:f8:bc:bf:c7:56:c4:25:2c:ba:64:93:41:6c:27:c7:ab:c3:80:8a:23:8e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate news.so

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.so

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.31sheds.com
*.alaskaneedsaraise.org
*.bikeloan.com.au
*.capitalmetro.org
*.cedarscabins.com
*.coastalexterminating.com
*.dichvulmd.net
*.eliq.pl
*.fedloanserving.org
*.firstcupcafetx.com
*.garagedoorsnewhaven.com
*.goodrecordtolearn-today.info
*.gunnisonconsulting.biz
*.inglewoodbor.org
*.international-orange.org
*.ispdc.org
*.jonericriis.com
*.kellyhannadds.com
*.kenbraiding.com
*.kingschat.at
*.life-hacking.net
*.mountainrockwhey.com
*.needofislam.com
*.news.so
*.onsinhutuu.net
*.piperanselmi.com
*.pragatipackersandmovers.co
*.prettyinpinktoo.com
*.promobabyofertas.com
*.repentanceandholiness.org
*.rusanesth.com
*.salamdl.co
*.shirturl.at
*.shopbodyfitness.com
*.spiritlakecasino.net
*.stcharlesworks.com
*.sunandmoo.co
*.sushi.de
*.tannermans.com
*.teenboysex.tv
*.tennysonpoint.au
*.themclunegroup.org
*.triplegarage.com
*.tullahomanews.co
*.vwb6b.com
*.xyzyoursdeal.net
*.ynynsp.com
*.youngsextube.me
*.zhiboya.cc
*.znye.com
31sheds.com
alaskaneedsaraise.org
bikeloan.com.au
capitalmetro.org
cedarscabins.com
coastalexterminating.com
dichvulmd.net
eliq.pl
fedloanserving.org
firstcupcafetx.com
garagedoorsnewhaven.com
goodrecordtolearn-today.info
gunnisonconsulting.biz
inglewoodbor.org
international-orange.org
ispdc.org
jonericriis.com
kellyhannadds.com
kenbraiding.com
kingschat.at
life-hacking.net
mountainrockwhey.com
needofislam.com
news.so
onsinhutuu.net
piperanselmi.com
pragatipackersandmovers.co
prettyinpinktoo.com
promobabyofertas.com
repentanceandholiness.org
rusanesth.com
salamdl.co
shirturl.at
shopbodyfitness.com
spiritlakecasino.net
stcharlesworks.com
sunandmoo.co
sushi.de
tannermans.com
teenboysex.tv
tennysonpoint.au
themclunegroup.org
triplegarage.com
tullahomanews.co
vwb6b.com
xyzyoursdeal.net
ynynsp.com
youngsextube.me
zhiboya.cc
znye.com

Other certificates including the domain name news.so

(limited to 100 certificates)
belinvestbank.com
news.so
news.so
news.so
news.so
belinvestbank.com
news.so
belinvestbank.com

Certificate

The complete raw certificate details for news.so in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289316525474630368139112877247165199073000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 18:33:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 18:33:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.so'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 691062527337541458404253053342468839104634196092963086667968922828434657414135633678955566824249770758287548123225038678298148606776097331855090357034125662437841691738729351403905892804784296174039552475726947109970102070991141508369035665535990032981563056162195600883353832876265388318339389275445921494397495960205803255786833958972994823495419101959515929983647984715228462009311464770746735800738356341194827798111060477739590790841005246332955202673959608158976994583725270230146888728379283821950971573152584284096069975733773932570938800912456807041858558087651848590582359183696332730505734130065595885840543220170931689379207849822996849993454492665653064938171381299187823808678754268086259339888576493752850132298102089272499975716644758469960144497538654173880919266125372973115630945312292333009611088518839457534364605939751225709972275612038496190126004506429090241686067817678698113648691529238827242789350623608263717253957179684271779121775009280651536485022311923712092799196472348528002773928854985860389642092484470404721817749800315811855263066232204781932339376011184222385246867989447060710840065571180059385384079290000047011905399846813927024321966613894678169912413227377739020272518753430254770703614903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f75aefda580313cccf960bae450218d8d3571ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1884 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.31sheds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alaskaneedsaraise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikeloan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalmetro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cedarscabins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coastalexterminating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dichvulmd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eliq.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fedloanserving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstcupcafetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garagedoorsnewhaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodrecordtolearn-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gunnisonconsulting.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inglewoodbor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.international-orange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ispdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jonericriis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kellyhannadds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kenbraiding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingschat.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.life-hacking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountainrockwhey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.needofislam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onsinhutuu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piperanselmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pragatipackersandmovers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prettyinpinktoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promobabyofertas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repentanceandholiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rusanesth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salamdl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirturl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopbodyfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiritlakecasino.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stcharlesworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunandmoo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sushi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tannermans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teenboysex.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tennysonpoint.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themclunegroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triplegarage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tullahomanews.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vwb6b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xyzyoursdeal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ynynsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youngsextube.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhiboya.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.znye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '31sheds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskaneedsaraise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikeloan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalmetro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cedarscabins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastalexterminating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dichvulmd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliq.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedloanserving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstcupcafetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garagedoorsnewhaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodrecordtolearn-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunnisonconsulting.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inglewoodbor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international-orange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ispdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonericriis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellyhannadds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenbraiding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingschat.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-hacking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainrockwhey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needofislam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onsinhutuu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piperanselmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pragatipackersandmovers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prettyinpinktoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promobabyofertas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repentanceandholiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusanesth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salamdl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirturl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopbodyfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritlakecasino.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcharlesworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunandmoo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tannermans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenboysex.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennysonpoint.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themclunegroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triplegarage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tullahomanews.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwb6b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xyzyoursdeal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ynynsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngsextube.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhiboya.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'znye.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f3acc970c0000040300473045022055ce34e82c1c7c14aad30ffefaaab009b82dcf628d116372e190aa0bc8fb33e7022100ff238bd034c2eb00fc3254eaa3746699cc14373fef036c7909a1333273bad51c007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f3acc97140000040300473045022100a722facfb3cebdc0e77b433840cafafb4bc7c8f5c524431320b9467a4101f1e602202c959b3e4e897e88ae603a46ba861257b28a61a20ed3d2b8083801156beb9f08
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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