www.waterfronthouston.com

Issued by R3

About this certificate

This digital certificate with serial number 04:99:21:ed:45:c2:d1:e7:de:3d:3d:b8:ea:2e:14:18:b6:43 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.waterfronthouston.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:99:21:ed:45:c2:d1:e7:de:3d:3d:b8:ea:2e:14:18:b6:43
Serial Number (int): 400557442379082435332490291299694337898051
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 26:88:45:f4:c7:d0:a2:3c:85:20:15:8d:77:94:a5:84:05:2f:ee:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fd:da:c2:1d:06:e7:25:59:e4:91:ee:da:a6:d3:6e:cd:9c:3a:c3:ca
Fingerprint (sha256): a2:5c:ad:69:3b:6c:6a:81:fd:d0:e6:79:cf:6e:f6:66:55:71:81:70:f4:cd:6d:81:a1:53:7b:27:d1:79:04:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.waterfronthouston.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.waterfronthouston.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assetmanageaction.com
autoscargo.com
blogcargo.com
boliviaradio.com
careercargo.com
cargoreservation.com
commoditiesaaiun.com
commoditiesacapulco.com
commoditieson.com
commoditiesproduction.com
commoditydistribution.com
commoditytown.com
consultcargo.com
emiratesmodern.com
emiratesreservation.com
emiratesstation.com
fuelcallao.com
fuelpowerstation.com
fuelshalerevolution.com
fuelwashington.com
furniturecargo.com
kingdombamboo.com
kingdomofbabylon.com
kinshasaweather.com
leasingauction.com
leasingdowntown.com
leasingedmonton.com
leasingsanantonio.com
leasingtucson.com
machinecargo.com
methanolproduction.com
naphthaconservation.com
naphthaproduction.com
nigeriaproduction.com
nigeriatown.com
officecargo.com
petroleumaction.com
picturecargo.com
plazacargo.com
qatarsun.com
realestatecargo.com
restaurantcargo.com
sofiaweather.com
thorceo.com
thorinfo.com
tvmontelibano.com
tvrosario.com
unitedkingdomauction.com
waterfrontdavao.com
waterfronthouston.com
waterfrontsanantonio.com
www.assetmanageaction.com
www.autoscargo.com
www.blogcargo.com
www.boliviaradio.com
www.careercargo.com
www.cargoreservation.com
www.commoditiesaaiun.com
www.commoditiesacapulco.com
www.commoditieson.com
www.commoditiesproduction.com
www.commoditydistribution.com
www.commoditytown.com
www.consultcargo.com
www.emiratesmodern.com
www.emiratesreservation.com
www.emiratesstation.com
www.fuelcallao.com
www.fuelpowerstation.com
www.fuelshalerevolution.com
www.fuelwashington.com
www.furniturecargo.com
www.kingdomofbabylon.com
www.leasingauction.com
www.leasingdowntown.com
www.leasingedmonton.com
www.leasingsanantonio.com
www.leasingtucson.com
www.machinecargo.com
www.naphthaconservation.com
www.naphthaproduction.com
www.nigeriaproduction.com
www.nigeriatown.com
www.officecargo.com
www.petroleumaction.com
www.picturecargo.com
www.plazacargo.com
www.qatarsun.com
www.realestatecargo.com
www.restaurantcargo.com
www.sofiaweather.com
www.thorceo.com
www.thorinfo.com
www.tvmontelibano.com
www.tvrosario.com
www.unitedkingdomauction.com
www.waterfrontdavao.com
www.waterfronthouston.com
www.waterfrontsanantonio.com

Other certificates including the domain name waterfronthouston.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.waterfronthouston.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlSzpVsdFDmfDEwIXTCb
u2RSsQHLqf1yRkaC1ZM+QNK/klinhK8w+Gpajl3pHMJDZ4UwlK5xsdxtVik/TOTf
cY+GooNm4QcIE+yZP9PjKDRxsPUVHp+naTKuRPKZcpWOY52L5g/6moOMiIRY7JHK
VGBMtzhA9paKlM1Egi0K9CGG0lw+CxCToh8kzLBSa0+CWGmOm1s5EvZi0K5JNR4T
eR+vAb9CFHm6RJDu5Ne2qoWS8K/HqZw6zME91mFs5sRAVh+VbRyB1K4ALOx1FG4A
D4aOToheGsWt39w06ebiDGHUz3pnwHlWGimZYVijPKO1vJPG7yL8eLwHi/+LFtPN
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400557442379082435332490291299694337898051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 11:35:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 11:35:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.waterfronthouston.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21502279829865624388770061843202540449552375960360810250300830331065369412509352765679260871266985848921876402409635061529083621395948249208337042346703019818443346650972000441744788558444710634076308169458907888345953758000696472244833532632101065943006951338482428581867715738606850620358892372361520168842775297928755735549543522783757773313423205819769662501097972046460703611454619718847048910491491022950346098912307311104941956274067677888460905427082606437992312087341457616567311809549199376617582156104482679284831883156711980235873428077088919767005509495717653000475792752575424242655348967536176531754401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							268845f4c7d0a23c8520158d7794a584052feeed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanageaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoscargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boliviaradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careercargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargoreservation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commoditiesaaiun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commoditiesacapulco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commoditieson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commoditiesproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commoditydistribution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commoditytown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emiratesmodern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emiratesreservation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emiratesstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelcallao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelpowerstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelshalerevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelwashington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniturecargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingdombamboo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingdomofbabylon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinshasaweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leasingauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leasingdowntown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leasingedmonton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leasingsanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leasingtucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'machinecargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methanolproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naphthaconservation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naphthaproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriaproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriatown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officecargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petroleumaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picturecargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plazacargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qatarsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestatecargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sofiaweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thorceo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thorinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvmontelibano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvrosario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedkingdomauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfrontdavao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfronthouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfrontsanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanageaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoscargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boliviaradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careercargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cargoreservation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commoditiesaaiun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commoditiesacapulco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commoditieson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commoditiesproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commoditydistribution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commoditytown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consultcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emiratesmodern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emiratesreservation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emiratesstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuelcallao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuelpowerstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuelshalerevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuelwashington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.furniturecargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingdomofbabylon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leasingauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leasingdowntown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leasingedmonton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leasingsanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leasingtucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.machinecargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naphthaconservation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naphthaproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nigeriaproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nigeriatown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.officecargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petroleumaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.picturecargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plazacargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qatarsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realestatecargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurantcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sofiaweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thorceo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thorinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvmontelibano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvrosario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedkingdomauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterfrontdavao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterfronthouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterfrontsanantonio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018da79d33ef000004030046304402202f4d1f04122502b021909d03beafceae47bffe7225b7b313bab67cf6635eefcd02202bb241e090a1e27988349af107d340937f2dc36da3b331f2b7bfe39d01ed276000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018da79d34550000040300473045022100f86ae1f09645e13761ebefb82fbe49d68675b4f7a26b3907287bb9a591d2b49c02203a454c31d843ab4c9c003a879a7c7cea4e195b5c7c24a6ef0634fd6834310ac5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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