www.ancientsites.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:23:3c:8a:36:47:1a:a5:a1:b2:c6:a3:58:88:24:9d:57 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ancientsites.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:23:3c:8a:36:47:1a:a5:a1:b2:c6:a3:58:88:24:9d:57
Serial Number (int): 298474473110599868332231571642303813819735
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:49:2b:f3:bc:2e:a8:4d:28:81:9d:f2:73:b2:65:88:16:11:fe:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:e9:ab:aa:3d:fe:9f:38:9c:56:60:1a:84:27:b5:05:4e:0a:b9:ac
Fingerprint (sha256): 9c:ac:f0:3f:b0:85:da:76:ff:c5:b6:bc:05:87:ba:85:45:96:9e:e9:40:6c:9e:af:b4:3b:21:f8:0b:1f:43:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ancientsites.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ancientsites.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ancientassyrians.com
ancientsites.net
ancientsworld.com
assassinationofaruler.com
blockchainoutreach.com
buenaparkhome.com
buyantiquegold.com
coastalpowerstation.org
conglomorates.net
costaricajournal.com
creditbitcoin.net
culturallifetoday.com
curtainsopen.com
dancingarab.com
deportationpolicy.com
diysolarlight.com
farmingdocumentaries.com
fashioninvitation.com
fdainvestigates.net
fijisport.com
fortsmithlife.com
greeceevent.com
hungaryinvestor.com
immigrationfinance.com
jakartawomen.com
karachilife.com
lescites.net
manilabook.com
mayfairpenthouses.net
miningcompanies.org
namibiamarine.com
naturalbeijing.com
offshoresailinggear.com
offshorevermont.com
parkbeijing.com
personnelglobal.com
peruinvestor.com
piccadillypenthouses.net
pipelayleasing.com
radioconakry.com
sydneydistribution.com
talkbeijing.com
thewaterfronthome.com
tongaart.com
usaspirulinafarm.com
vancouverconcert.com
videosprogrammes.com
wasteuses.net
wholesalebulldozers.com
www.africapenthouse.com
www.ancientbabylonians.com
www.ancientsites.net
www.ancientsworld.com
www.bitcoinkreditgmbh.com
www.cashbookingonline.com
www.coastalpowerstation.org
www.conglomorates.net
www.costaricajournal.com
www.creditbitcoin.net
www.culturallifetoday.com
www.curtainsopen.com
www.defensearab.com
www.deportationpolicy.com
www.farmingdocumentaries.com
www.fashioninvitation.com
www.fdainvestigates.net
www.fijisport.com
www.fortsmithlife.com
www.greeceevent.com
www.hungaryinvestor.com
www.industriallend.com
www.installbathroom.com
www.jakartawomen.com
www.jobsagra.com
www.karachilife.com
www.lescites.net
www.manilacgi.com
www.marinecameras.com
www.mayfairpenthouses.net
www.miningcompanies.org
www.naturalbeijing.com
www.offshoresailinggear.com
www.offshorevermont.com
www.oil-supplies.com
www.panunited.com
www.parkbeijing.com
www.personnelglobal.com
www.piccadillypenthouses.net
www.pipesetleasing.com
www.polskimovies.com
www.radioconakry.com
www.recruitingradio.com
www.talkbeijing.com
www.tongaart.com
www.usaspirulinafarm.com
www.vancouverconcert.com
www.videosprogrammes.com
www.wasteuses.net
www.yokohamaart.com
yokohamaart.com

Other certificates including the domain name ancientsites.net

(limited to 100 certificates)
blockchainoutreach.com
www.validates.net
wasteuses.net
fdainvestigates.net
traderesidence.com
www.gaminghouses.net
fashioninvitation.com
www.fortsmithlife.com
www.coastalpowerstation.org
www.fortsmithlife.com
lescites.net
wntemplates.net
assassinationofaruler.com
wasteuses.net
conglomorates.net
www.fijisport.com
maritimedesk.com
mayfairpenthouses.net
prestigeemailaddresses.net
ancientsites.net
www.3dhouses.net
offshorevermont.com
www.systemvalidates.net
www.sohopenthouses.net
wasteuses.net
naturalbeijing.com
www.greeceevent.com
www.ancientsworld.com
videosprogrammes.com
radioconakry.com
fashioninvitation.com
engineeringclasses.net
wasteuses.net
bamboohouses.net
www.validates.net
negativeinterestrates.net
www.fijisport.com
www.parkbeijing.com
systemvalidates.net
singaporepenthouses.net
lescites.net
www.offshoresailinggear.com
worldheritagesites.net
miningcompanies.org
ancientsites.net
www.ancientsites.net
yokohamaart.com
dohadebates.net
dohadebates.net
www.monacolawoffice.com
naturalbeijing.com
www.culturallifetoday.com
www.wasteuses.net
pipelayleasing.com
www.defensearab.com
www.conglomorates.net
talkbeijing.com
naturalbeijing.com
offshorepirates.net
www.offshoresailinggear.com
maritimedesk.com
www.fortsmithlife.com
www.middleeastestates.net
www.oilfieldsites.net
maritimedesk.com
www.creditbitcoin.net
www.systemvalidates.net
www.ancientsworld.com
www.parkbeijing.com
www.lescites.net
www.pipesetleasing.com
www.marinecameras.com
personnelglobal.com
www.blockchainclasses.net

Certificate

The complete raw certificate details for www.ancientsites.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNNrA7uVeTIheSVoXREQ
gnIckn8qP1/z2AH9O2ddrB0HlLAMWlJVU6HbbJ35dePefCnjrR6ikgdNMok8IWx1
kbBjMSZzhfImIWjLPUSS5ZjXPStOEtzoGYVfIl7s4elF1zgWeSMzkNyyLvlvtNJM
Cx+mCoYxKp/nIx73pYVC1E9ZoBxx7ixSDmaxKnavzqQKZvjioq3SIFtatCgFbmEO
KU76cyiQ+aqaGPFn50k4I2Uh0JeYKcnN98g2xAqhZQm2iAjKPc5XdMlWtv0Tkzgl
LGEBsTGemN+zd5P5srnWwQHYHz3aOBLJMRo6VbQbAAPIomwgsKIm1tK07muirMET
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298474473110599868332231571642303813819735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-15 10:38:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 10:38:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ancientsites.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22827149007970834434668985355791683317814102959610647774942949582610959196355064429976595061361415607479560610450491259588393268289055755142910936893050710271075892793857531865539974426960940984311528832415439519775453789034612552084608611221097396860252976549972644994298642564052375249998013106030371854507357058875858663819731569296785891010974361228297794998282726276256763542095832899360601452265747572722272743977760033958015151328584803938409947711451057544774334520472362964385212026682487668426534563850384080165286170175586962068877171145907543524036315951315140334704541241823589393365240094626013545305007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66492bf3bc2ea84d28819df273b265881611fe24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancientassyrians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancientsites.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancientsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assassinationofaruler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainoutreach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buenaparkhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyantiquegold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastalpowerstation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conglomorates.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costaricajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditbitcoin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturallifetoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curtainsopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancingarab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deportationpolicy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diysolarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmingdocumentaries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashioninvitation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdainvestigates.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fijisport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortsmithlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greeceevent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hungaryinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immigrationfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jakartawomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karachilife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lescites.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manilabook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayfairpenthouses.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miningcompanies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namibiamarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalbeijing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoresailinggear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorevermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkbeijing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personnelglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peruinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piccadillypenthouses.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipelayleasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioconakry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneydistribution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkbeijing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewaterfronthome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tongaart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaspirulinafarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancouverconcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videosprogrammes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasteuses.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesalebulldozers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africapenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ancientbabylonians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ancientsites.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ancientsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinkreditgmbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashbookingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coastalpowerstation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conglomorates.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costaricajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditbitcoin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturallifetoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curtainsopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defensearab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deportationpolicy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmingdocumentaries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fashioninvitation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdainvestigates.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fijisport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortsmithlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greeceevent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hungaryinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industriallend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.installbathroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jakartawomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobsagra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karachilife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lescites.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manilacgi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marinecameras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayfairpenthouses.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miningcompanies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalbeijing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoresailinggear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorevermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oil-supplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkbeijing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personnelglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piccadillypenthouses.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pipesetleasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polskimovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radioconakry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recruitingradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talkbeijing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tongaart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usaspirulinafarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancouverconcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videosprogrammes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wasteuses.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yokohamaart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yokohamaart.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b5aee90810000040300463044022055b123be917d4103c884c69b9de78a7350430bd2d38c737e4b9dff932844216602206408b82030b4d79f55b9562ecb68c57a9c04b45b57e812ef0b11c7ba5a7bec5400770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b5aee8e110000040300483046022100e87e943a5871ee698a7374e7ddbcd73926d46d533e42be4f11ef6bc9e51a6bcf022100e8844ee9a1f0886e6ac40a4eba412793c0420b41e83a20c58a9c2bda16c5efd8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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