www.sovereignspa.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:11:e1:f4:67:9e:c1:e1:32:e6:8f:54:df:a5:d1:30:59:e3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sovereignspa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:e1:f4:67:9e:c1:e1:32:e6:8f:54:df:a5:d1:30:59:e3
Serial Number (int): 267422003354088024097045940165964668623331
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:29:39:59:63:fc:68:41:37:09:a8:a0:c1:0f:b6:99:0d:e4:ce:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:94:cc:04:1d:83:e9:6f:a2:96:14:0b:53:38:ff:a6:33:98:a8:af
Fingerprint (sha256): 99:1c:a1:42:56:6c:bb:dc:e8:86:8b:e9:74:58:f0:48:07:2a:e4:94:4d:a8:ff:a6:f9:1e:24:e4:14:55:63:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sovereignspa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sovereignspa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asiaoceanstock.com
beijingkaraoke.com
bpresse.com
chinakaraokeclub.com
cineassets.com
cotedazurland.com
cotedazurrent.com
demandstories.com
explorationemployment.com
foodprogramme.net
intershipacademy.net
moneylanguage.org
newoffshorerealty.com
newoffshoresafety.com
onlinelearningprorgam.com
pushinnovation.org
pushintuition.org
quizf1.com
quizfood.com
quizfurniture.com
quizpicture.com
quizsale.com
quizstage.com
quizteenage.com
recordingstudioworld.com
remotewellness.net
runcurrency.org
sovereignarea.com
sovereigncafe.com
sovereigncleaningservice.com
sovereignfree.com
sovereigngrand.com
sovereignimage.com
sovereigninfrastructure.com
sovereignmobile.com
sovereignplaza.com
sovereignsale.com
sovereignspa.com
theaterdirect.com
transsovereignpipeline.com
transuzbekistanpipeline.com
uzbekistanculture.com
uzbekistanfood.com
uzbekistanhd.com
www.africabusinesscommunity.com
www.africabusinessleader.com
www.asiaoceanstock.com
www.beijingkaraoke.com
www.bpresse.com
www.cabletvsingapore.com
www.cineassets.com
www.consumerindustrials.com
www.cotedazurland.com
www.cotedazurrent.com
www.demandstories.com
www.explorationemployment.com
www.farmsaloevera.com
www.filmhonour.com
www.foodprogramme.net
www.indokaraokeclub.com
www.intershipacademy.net
www.learningaidprogram.com
www.mediafinancier.com
www.moneylanguage.org
www.newoffshorerealty.com
www.newoffshoresafety.com
www.onlinelearningprorgam.com
www.privatefundsbank.com
www.pushinnovation.org
www.pushintuition.org
www.quizf1.com
www.quizfood.com
www.quizfurniture.com
www.quizpicture.com
www.quizsale.com
www.quizstage.com
www.quizteenage.com
www.recordingstudioworld.com
www.remotewellness.net
www.runcurrency.org
www.shanghai-karaoke.com
www.shippingsector.com
www.sovereignarea.com
www.sovereigncafe.com
www.sovereigncleaningservice.com
www.sovereignfree.com
www.sovereigngrand.com
www.sovereignimage.com
www.sovereigninfrastructure.com
www.sovereignmobile.com
www.sovereignplaza.com
www.sovereignsale.com
www.sovereignspa.com
www.theaterdirect.com
www.transsovereignpipeline.com
www.transuzbekistanpipeline.com
www.uzbekistanfood.com
www.uzbekistanhd.com
www.yangonglobe.com
yangonglobe.com

Other certificates including the domain name sovereignspa.com

(limited to 100 certificates)
www.cryptomaid.com
www.jointinterview.net
mindcontrolledinterface.com
www.businessfundingshow.net
abafree.com
jointinterview.net
www.sovereignspa.com
offshoreanguilla.com
www.cubistartshow.net
www.legalmalaysia.com
sovereignspa.com
www.offshorecryptoltd.org
oceantelephone.com
www.offshorecryptoltd.org
www.exchangearmenia.com
offshoreanguilla.com
www.offshorecryptoltd.org
www.sovereignspa.com
www.offshorecryptoltd.org
whoisyellow.net
arabgeographic.com
westafriocacoffee.com
offshoreelectronic.com
www.musictonga.com
pricesbelow.net
www.sovereignspa.com
offshoreanguilla.com
www.sovereignspa.com
www.sovereignspa.com
romanticvirginiabeach.com
www.berlinboerse.com
www.futurespacestation.com
cablemilan.com
www.offshorecryptoltd.org
www.worldbankcorruption.net
romanticvirginiabeach.com
offshoreelectronic.com
offshoreanguilla.com
netluxembourg.com
stuttgartboerse.com
offshorefinanceindustry.com
recruitingnigeria.com
offshoreanguilla.com
www.rocketfueling.org
www.sovereignspa.com
www.sovereignspa.com
environmentsecretary.com
bestorganicrice.com
www.offshorecryptoltd.org
www.cutandweld.com
nightvisionengineering.com
www.joanmiroshow.net
www.berlinboerse.com
propagandafilmshow.net
offshorefinanceindustry.com
www.offshorecryptoltd.org
enabletransactions.com
www.jointinterview.net
www.prelusion.org
www.publishingfund.com
offshoreanguilla.com
bestorganicrice.com
bestorganicrice.com
talentedpoverty.com
www.universityofpanama.com
www.offshoreelectronic.com
organicsprouted.com
westafriocacoffee.com
www.offshorecryptoltd.org
www.thefutureofsolarenergy.com
nightvisionengineering.com
www.literaturejamesjoyce.com
westafriocacoffee.com
www.panamajob.com
picassoshow.net
armsshow.net
arabgeographic.com
www.offshorecryptoltd.org
critiquefullshow.net
www.berlinboerse.com
www.monsterscreated.com

Certificate

The complete raw certificate details for www.sovereignspa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkToThhdQ5XN3Hq/y68x
JxtaFT6z7fC1UmmUApt69pXr7cvVNb00VfQtx3qbHFfzVb3a8HJ7dLzinVsmrbhM
3LIM9b1pqw5hDmoN2Ng6Bjsg6Hp3ih4L5/MwEdh+iD25VMB8xkJYk1Mr7nlDavar
Uw1LYUvAUuu79v1Q12o5gnl2a21RNRV35P2jU3GIFwP5XlKRBTyaSukCznzUGjB3
CRjMkLSvYEr3r4ATE04WqNfJMrukK7ApaY3VFjOdUDlUt/497+8fcwsduXO9MGc5
Asopf7G4ERO/rKoG8cNx2rg8fOvGkmopL0oAB/m2ocDe/7NoFl1ijwGKZ6MbjXJD
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267422003354088024097045940165964668623331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-28 10:32:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-26 10:32:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sovereignspa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19474678490678887526804218846899788283399116632293199028401549321533088748435479820091489272382317477851564962106226172559560009673701681314562830834480171194369941552751319244472411155193505394967463126099995153356127139575172226010665327855553088559072242572966500905708311363747372353629954421005901592358939391562411515425375352728292531362717576594891675673525228675775503066519448844047311756133516149149060853956319433378834301868399508995419240572248574374926684947929568443173486142116245940801469031416021624288923432656314889409645137897236590547582557304136718876999437904118133517011012218132708681990967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a29395963fc68413709a8a0c10fb6990de4ce47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiaoceanstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beijingkaraoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpresse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinakaraokeclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cineassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotedazurland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotedazurrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandstories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explorationemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodprogramme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intershipacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneylanguage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newoffshorerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newoffshoresafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinelearningprorgam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushintuition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizf1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizpicture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizteenage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordingstudioworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotewellness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runcurrency.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereigncafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereigncleaningservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereigngrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereigninfrastructure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theaterdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transsovereignpipeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transuzbekistanpipeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzbekistanculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzbekistanfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzbekistanhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africabusinesscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africabusinessleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asiaoceanstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beijingkaraoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpresse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabletvsingapore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cineassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consumerindustrials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotedazurland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotedazurrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demandstories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorationemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmsaloevera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmhonour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodprogramme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indokaraokeclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intershipacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningaidprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediafinancier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moneylanguage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newoffshorerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newoffshoresafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinelearningprorgam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatefundsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pushinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pushintuition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizf1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizpicture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizteenage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordingstudioworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.remotewellness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runcurrency.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shanghai-karaoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shippingsector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereigncafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereigncleaningservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereigngrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereigninfrastructure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theaterdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transsovereignpipeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transuzbekistanpipeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzbekistanfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzbekistanhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yangonglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yangonglobe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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