www.legistlation.com

Issued by R3

About this certificate

This digital certificate with serial number 03:75:5b:cf:ee:bf:cb:ff:48:fa:aa:76:07:8c:8b:dd:0b:1f was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.legistlation.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:75:5b:cf:ee:bf:cb:ff:48:fa:aa:76:07:8c:8b:dd:0b:1f
Serial Number (int): 301271934120505883005874019789919674501919
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:ae:a5:73:5f:4b:68:d0:01:63:7d:37:60:f4:57:d4:22:74:3d:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:89:ae:fd:5f:9b:e3:9b:4b:4a:3e:73:9a:4b:e2:60:39:fa:3e:bb
Fingerprint (sha256): 9e:7e:a8:aa:d2:5f:85:d5:61:fe:0b:29:e6:60:c3:b6:80:81:d5:87:fe:5f:b8:65:09:0d:67:46:20:57:0b:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.legistlation.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.legistlation.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

10yrtreasury.com
abroadstudents.com
abudhabilifestyle.com
amsterdamrehab.com
automationexpertindia.com
bespokegiftcompany.com
bitcoingram.net
bitcoinmonaco.net
blockchaincareer.net
blockchaincareers.net
blockchaincoders.net
blockchainmonaco.net
bornwithtec.com
cloudmechanism.com
deepwateraccommodation.net
digitaldisplaymedia.com
dronemining.org
fiduciaryafrica.com
flashnewsasia.com
floatingaccommodation.net
gmoworldhealth.net
junglehotels.com
manilachandler.com
manilatraveller.com
maritimetransportation.net
musicdivarecord.com
newsantarctica.com
offshoreaccommodationship.net
offshoreconstructions.net
offshorescaffolding.net
pipelayleasing.net
recyclingerepublic.com
richardstrauss.net
rosioridevede.com
royalfamilyprivatewealth.net
salesshipping.com
singaporegrowers.net
singaporegrowing.net
solarpowerbroadband.com
squareshanghai.com
thecreditanalysts.com
vesselfarms.net
www.3dperformances.com
www.amsterdamrehab.com
www.arabrentals.com
www.asiapacificguide.com
www.automationexpertindia.com
www.baliherbalist.org
www.bespokeeventscompany.com
www.bespokegiftcompany.com
www.bitcoingram.net
www.bitcoinmonaco.net
www.blockchaincareer.net
www.blockchaincareers.net
www.blockchaincoder.net
www.blockchainmonaco.net
www.bornwithtec.com
www.chicagoworking.com
www.constructionships.net
www.decoreaza.com
www.deepwateraccommodation.net
www.dronemining.org
www.electricbulk.com
www.elitesecurityteam.org
www.flashnewsasia.com
www.floatingaccommodation.net
www.gulfaccommodation.net
www.legistlation.com
www.manilacamp.com
www.manilachandler.com
www.marine3.com
www.maritimetransportation.net
www.musicdivarecord.com
www.newsantarctica.com
www.nightquiz.com
www.offshoreaccommodationship.net
www.offshoreconstructions.net
www.productanalysts.com
www.richardstrauss.net
www.rosioridevede.com
www.royalfamilyprivatewealth.net
www.saintpetersburglifestyle.com
www.singaporecooking.com
www.singaporegrowers.net
www.singaporegrowing.net
www.solarpowerbroadband.com
www.vesselfarms.net
www.zeitjob.com
www.zigongtechnology.com
zigongtechnology.com

Other certificates including the domain name legistlation.com

(limited to 100 certificates)
www.deepwateraccommodation.net
www.manilainteractive.com
www.pariscatering.com
riginstallation.com
riginstallation.com
www.boogiehd.com
www.physicalregeneration.net
colonialdomination.net
www.floatingaccommodation.net
www.sipingtechnology.com
offshorescaffolding.net
theancientgreeks.com
royalfamilyprivatewealth.net
www.amsterdamrehab.com
www.manilainteractive.com
www.blockchaincareers.net
energyregeneration.net
foodfunny.net
www.adelaidecar.com
energyregeneration.net
www.tissueregeneration.net
dubaicivilaviation.com
www.solarpowerbroadband.com
911coverup.net
911coverup.net
www.interestspeculation.com
holidaysinuae.com
www.footsoldiers.net
fleecefabrication.net
adelaidecar.com
www.dronemining.org
www.female-genital-mutilation.com
worldrecruiting.net
www.chittagongbitcoin.com
domainintelligence.net
tamilenglish.com
legistlation.com
manilatraveller.com
floatingaccommodation.net
floatingaccommodation.net
royalbitcoinexchange.com
royalfamilyprivate.net
www.female-genital-mutilation.com
www.bespokeeventscompany.com
www.footsoldiers.net
semisubmersibleoilrig.com
riginstallation.com
alloffshoreinstallation.com
tamilenglish.com
www.solarpowerbroadband.com
holidaysinuae.com
manilatraveller.com
www.playlistsongs.com
dubaicivilaviation.com
manilatraveller.com
adelaidecar.com
tamilnadustate.com
squareshanghai.com
www.amsterdamrehab.com
www.installation.com
www.constructionships.net
www.blackpublicrelation.com
maritimetransportation.net
www.physicalregeneration.net
www.bespokegiftcompany.com
sipingtechnology.com
squareshanghai.com
www.legistlation.com
tamilprivate.com
www.aseaconstructioninstallation.com
globalsolarinstallation.com
www.consumerinflation.com
www.playlistsongs.com
www.coastalaccommodation.net
singaporegrowing.net
www.blockchaincareers.net
ibbsolar.com
www.gulfaccommodation.net
www.blackpublicrelation.com
amsterdamrehab.com
blockchainmonaco.net
singaporegrowing.net
www.physicalregeneration.net
www.female-genital-mutilation.com
abudhabilifestyle.com
constructioncompaniesinuae.com
boogiehd.com
manilatraveller.com
www.theancientgreeks.com
www.maritimetransportation.net
comanchenation.net
holidaysinuae.com
ultradeepwaterpipelineinstallation.com
riginstallation.com
www.aimachinelearning.net
www.spreadingdisinformation.net
www.floatingaccommodation.net
www.quarterlyearning.com
www.dronemining.org
www.amsterdamrehab.com

Certificate

The complete raw certificate details for www.legistlation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI5oiz3cH2d7SPCAAntB
SLCL6ViJoYpU2LrPXExZ3crcqo1ZVfM2Fuhmi8gnvBmJZFnZVcXWAL8k1Mq/DUkC
NQeQkA72w12qPQnsIlCqIQ83xGRV0yTgQyNXPGp2MWn5VcGSF21vK0+k2xGitT28
hU3StD4pbvOlP3q1l+72HWw9bt8PbKp2azWDhiKyWMgGlev/XhFlL1XomWFiX4aW
yyUT2w2gDOhgz5VCNIUtreLs2DXp44vgU8fTKvlkzewp93aswzB+FntCrFeSC5BZ
E5ysV4fWBqUxSo03B4Y3KoYjxd8IUJNBxrKzSjZZ9ulJcWg0857mZzikF2edK+Tz
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301271934120505883005874019789919674501919
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 10:31:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-31 10:31:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.legistlation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23298072300590333907273176918656166707139508936563183781306872859175054686809704474168625070437550231734309333001546214023173067564761115611231958477897207942778524337033718815151400182995201248170196559275746869443866588954333243620206378747346121811330824302228307229952862081068843441985413183979573365883718731091576420374828801742534328870894968956574131441007593157677278278382188010799615505296737932813642512911810681330697872415586777470629615404912585955184574129340297696597544421750255717984117279464772639702385325471381363262171917498515318870810471373862313787443369847052523816675696329116102244496201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7baea5735f4b68d001637d3760f457d422743d8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10yrtreasury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abroadstudents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abudhabilifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsterdamrehab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automationexpertindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bespokegiftcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoingram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinmonaco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchaincareer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchaincareers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchaincoders.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainmonaco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bornwithtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmechanism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepwateraccommodation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaldisplaymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dronemining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiduciaryafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashnewsasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floatingaccommodation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmoworldhealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junglehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manilachandler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manilatraveller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritimetransportation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicdivarecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsantarctica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreaccommodationship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreconstructions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorescaffolding.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipelayleasing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclingerepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richardstrauss.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosioridevede.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalfamilyprivatewealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesshipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singaporegrowers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singaporegrowing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarpowerbroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squareshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecreditanalysts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesselfarms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dperformances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsterdamrehab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arabrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asiapacificguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automationexpertindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baliherbalist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bespokeeventscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bespokegiftcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoingram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinmonaco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchaincareer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchaincareers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchaincoder.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainmonaco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bornwithtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagoworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.constructionships.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decoreaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deepwateraccommodation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dronemining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electricbulk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elitesecurityteam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flashnewsasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.floatingaccommodation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gulfaccommodation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legistlation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manilacamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manilachandler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marine3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maritimetransportation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musicdivarecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsantarctica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nightquiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoreaccommodationship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoreconstructions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.productanalysts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richardstrauss.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosioridevede.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalfamilyprivatewealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpetersburglifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singaporecooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singaporegrowers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singaporegrowing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarpowerbroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vesselfarms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeitjob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zigongtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zigongtechnology.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fd8b860d40000040300473045022100fd7f5700c56c0a0321f1f2985b6a2e00eef92a53212d6c216c5dc14c39d1bc2c022014cf416c0629007e8b9f16ae916115d3b49a471be333ab2eef4fdb71669e74bb007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fd8b861920000040300483046022100a943458d70a19c5f1a4edd7c4f741d60dd7e34ca8ae373263bdd2d7740dddf7b02210089f9ea4be1cf541f7207fb4f1cb4054d5cc3345aa850921451e286dda828ca43
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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