www.alternativeactivity.com

Issued by R3

About this certificate

This digital certificate with serial number 04:32:c4:ed:0d:ab:fc:16:f4:7d:d2:5c:5a:51:ac:1b:f4:c5 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.alternativeactivity.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:32:c4:ed:0d:ab:fc:16:f4:7d:d2:5c:5a:51:ac:1b:f4:c5
Serial Number (int): 365725021611914584635733786931294577095877
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:19:67:69:69:f7:f4:67:06:79:f6:5b:3e:22:d1:54:d3:31:f0:4b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:08:ed:c0:19:2a:0b:db:fa:49:48:da:81:98:ec:ec:fc:54:d3:22
Fingerprint (sha256): b3:b3:5a:d7:f9:7b:ee:91:44:6b:b9:a3:a2:a1:55:7f:e7:45:2a:a7:0d:a8:05:5a:c6:a9:27:88:77:10:43:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.alternativeactivity.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.alternativeactivity.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

247renewablepower.net
afelon.com
africaarchitect.com
africanvolunteer.com
alternativeactivity.com
assetstrippers.net
cctvsport.org
china-democracy.com
cleanenergybreakwater.com
coastalwavepower.com
cottonnews.com
creativediplomacy.org
earthcrusts.org
egyptianartists.org
eucommission.net
fashionorient.com
fullhistorydocumentary.com
gameswoman.com
globalmarketlondon.com
harmfulenergyproject.com
hindirecord.com
interactiveplc.org
irishwaterfront.com
islandbroadcast.com
jerusalemtrust.com
kulpi.com
legalbaltimore.com
londonpatent.com
managerdesign.com
marineactivity.com
montrealprivate.com
nepaltrust.com
offshorepersonal.com
oilasset.org
oslocentre.com
philippinesblockchaincollege.com
philippinestrust.com
postjustice.com
richmondpost.com
seaweedfarm.net
shaleoildevelopment.net
thinhairtreatment.com
ugandatrust.com
underwatermappingsurvey.com
victoriatrust.com
waveenergyfarm.net
waveenergypark.net
windpowerstation.net
www.247renewablepower.net
www.afelon.com
www.africaarchitect.com
www.alternativeactivity.com
www.assetstrippers.net
www.cctvsport.org
www.china-democracy.com
www.cleanenergybreakwater.com
www.coastalwavepower.com
www.coldfusionreviews.com
www.cottonnews.com
www.earthcrusts.org
www.egyptianartists.org
www.emailsymbol.com
www.eucommission.net
www.fashionorient.com
www.fullhistorydocumentary.com
www.gameswoman.com
www.harmfulenergyproject.com
www.hindirecord.com
www.interactiveplc.org
www.irishwaterfront.com
www.islandbroadcast.com
www.japanfashionshow.com
www.jerusalemtrust.com
www.legalbaltimore.com
www.londonpatent.com
www.managerdesign.com
www.marineactivity.com
www.monacoemployment.com
www.montreallease.com
www.nepaltrust.com
www.netherlandsblockchaincollege.com
www.oilasset.org
www.oilassets.org
www.oslocentre.com
www.philippinestrust.com
www.postlawoffice.com
www.richmondpost.com
www.romaniatrust.com
www.seaweedfarm.net
www.shaleoildevelopment.net
www.somaliastar.com
www.thinhairtreatment.com
www.ugandatrust.com
www.underwatermappingsurvey.com
www.victoriatrust.com
www.waveenergyfarm.net
www.waveenergypark.net
www.windpowerstation.net

Other certificates including the domain name alternativeactivity.com

(limited to 100 certificates)
stellaractivity.com
www.wealthluxembourg.com
www.gallerycollege.com
windpowerstation.net
heliacalactivity.com
conceptofrelativity.com
www.247renewablepower.net
screengravity.com
www.jerusalemtrust.com
www.afelon.com
marineactivity.com
offshorepersonal.com
centralbankactivity.com
www.seaweedfarm.net
www.motiongravity.com
offshorepersonal.com
www.conceptofrelativity.com
stereogravity.com
coastalwavepower.com
www.constructionactivity.com
screengravity.com
waveenergypark.net
sonicriderszerogravity.com
www.spingravity.com
gallerycollege.com
textlinkgravity.com
cleanenergybreakwater.com
waveenergypark.net
londonpatent.com
anxiousactivity.com
www.earthactivity.com
www.thinhairtreatment.com
www.restfulactivity.com
www.gallerycollege.com
philippinestrust.com
irishwaterfront.com
www.china-democracy.com
offshorepersonal.com
www.afelon.com
www.alternativeactivity.com
luandarealty.com
www.afelon.com
www.afelon.com
www.assetstrippers.net
sonicriderszerogravity.com
www.afelon.com
www.constructionactivity.com
www.constructionactivity.com
www.waveenergyfarm.net
247renewablepower.net
www.partgravity.com
www.cosmicactivity.com
oslocentre.com
heliacalactivity.com
bangladeshfree.com
www.thinhairtreatment.com
www.windpowerstation.net
zeropointgravity.com

Certificate

The complete raw certificate details for www.alternativeactivity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6dM8wSiBKtGrT3atjjx
ZH+iK7CCLdwXLQxdAY1skAlx0eS7XmblAI41wtHqrlKiOHDCh0KEBK4tP20Vo1tG
oq4N+G6CCzcgp8Bo9Xq6Q9SYSQCAwqtVsoM69JTlRs/Pbq3PIA2k7O6e3DDqZnPo
0Uq9U7ltxNS8h0h0CNW3tfOreJH5+mkwPmVBXEuc1TE7jqrCEIYLp/apM0iSTKLH
sTiJP5ZOJ3aoULXzmCGjbbiGwA7DZ1ejpgesgCaYrN1D/JsyV0/ZG3YStJVonsu6
Dh5ivkpQECyrArb1qswHEhMQUbBeJJjVVbV/RJXp5mf99y7laxQjr3Oa9ZjmE2Rt
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365725021611914584635733786931294577095877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 11:45:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 11:45:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.alternativeactivity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21669249141532701404476858584702570458442419219287884961374314276989586128204186680479763865177961460094915369710791111527581723550322307606715037331366327779573930694537521210077418755271517383084782423863531820112231271931897060932121025579324598285882427427220357022886144181099952649608297748429478822557644373749934138714080852886026730427284198043910741505943650187443074614452330442185325333394207923615696979537796069853776110434253453825005134436485197125110270793606020643229699562540299237077836186730423117425199433100571520248271617659237546497099837865447342211039024053359425002824701986072290021109017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3819676969f7f4670679f65b3e22d154d331f04b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '247renewablepower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afelon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africaarchitect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanvolunteer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternativeactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetstrippers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cctvsport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china-democracy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanenergybreakwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastalwavepower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativediplomacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthcrusts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egyptianartists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eucommission.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionorient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullhistorydocumentary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameswoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmarketlondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmfulenergyproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hindirecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactiveplc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irishwaterfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islandbroadcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerusalemtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kulpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalbaltimore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonpatent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managerdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marineactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montrealprivate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nepaltrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorepersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilasset.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oslocentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philippinesblockchaincollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philippinestrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postjustice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaweedfarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaleoildevelopment.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinhairtreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugandatrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underwatermappingsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriatrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waveenergyfarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waveenergypark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windpowerstation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.247renewablepower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afelon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africaarchitect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alternativeactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetstrippers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cctvsport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china-democracy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleanenergybreakwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coastalwavepower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coldfusionreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earthcrusts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egyptianartists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emailsymbol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eucommission.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fashionorient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullhistorydocumentary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameswoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harmfulenergyproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hindirecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interactiveplc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irishwaterfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.islandbroadcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.japanfashionshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerusalemtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalbaltimore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonpatent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.managerdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marineactivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monacoemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montreallease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nepaltrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netherlandsblockchaincollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oilasset.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oilassets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oslocentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.philippinestrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richmondpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romaniatrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaweedfarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaleoildevelopment.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somaliastar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinhairtreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ugandatrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.underwatermappingsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriatrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waveenergyfarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waveenergypark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windpowerstation.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5e0fbcb40000040300483046022100cabdc4fbad1480cdd849605b2dba87cb52f47a8b2d82df8c2a6f7251ac9064b7022100d87585f4731ee27ccb2082f6d6ab99b1b67ace70bac65bf2d63fd97809a39c26007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c5e0fbcac000004030047304502205b9c400b1041c5e663add5575722f2fa2e24b7ed2b4190d3296429d339c4b2470221008933bcb191bb73c8357c8208449e57933353a462cb7f12022b2c7fecd549c7d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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