exchangedchurch.org

Issued by R10

About this certificate

This digital certificate with serial number 04:65:36:57:74:9c:5a:9b:93:81:00:39:a1:1b:c4:0c:7d:9d was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=exchangedchurch.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:65:36:57:74:9c:5a:9b:93:81:00:39:a1:1b:c4:0c:7d:9d
Serial Number (int): 382889895192801998490209407449917010247069
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 96:32:73:30:96:c1:1a:63:0e:77:70:97:63:92:e9:11:0c:14:09:04
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): ad:6c:95:d7:57:e8:38:9d:a4:02:35:27:d6:e9:3a:33:1c:d2:46:f1
Fingerprint (sha256): cb:27:3c:bd:8f:3b:75:02:70:3c:90:f4:8d:c3:a0:40:3f:86:bb:8a:51:3e:22:76:99:db:3f:20:87:80:df:24

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate exchangedchurch.org

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchangedchurch.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alainmichaud.net
annunciincontri.it
arbitragecourse.com
arbitrageur.com
arbitrageur.fr
atvidaberg.com
atyli.com
aurangabaddental.in
bankruptcies.net
bankruptcy-means-test-calculator.com
bolo.co.in
bongload.com
brianjmurphy.co
captiva.us
churchsurplus.org
cnfts.xyz
crickettraining.in
datingclassified.nz
dcpig.com
diamonditis.com
divergentunion.com
drexpert.com
duluthdivorceattorney.com
ecotour.in
evansrs.com
exchangedchurch.org
fantasycostume.net
findyourcandidate.com.au
foreignpharma.com
frflanagan.org
galaxylegal.com
graciefamily.org
hcs1920.com
hiriseroofing.com
homeschooldefenders.com
hotporngames.com
hoverboard.co.in
iceland.biz
indianascrap.com
ivorypokerpalace.com
justinpaulstark.com
kodua.com
kontaktannonse.gratis
lamblake.com
masterresellrightsproducts.com
mayaixchell.com
mdyer.org
michianagarbage.com
myperfume.in
nafrt.us
nesscounty.com
nm.cosfacts.org
norden.biz
nunchakus.com
olmosparknews.com
panske.com
peakedibles.com
pearlsoftheocean.com.au
petcits.com
pgj.co.in
pharmacyreviewer.net
pharmacyreviews.co
poweredbyrxsugarofficialcertification.com
rajasthanmatrimony.in
rasselas.com
rc-toys.com
rencontres.click
rencontresexe.vip
rencontressexe.com
rockweedtrading.com
rxsugarbitez.com
searchblog.com
servicecoronado.com
smartcellphonestore.com
specialityhemp.com
standarddivorce.com
suncitywindowwashers.com
theclutterandhoardingpros.com
tongarealestate.com
trailerupholstery.com
transfers.epik.support
usa-precisionarms.com
wnymedicareinsurance.com
www.distributedpv.com
www.love2hempyou.com
www.mizuuu.xyz
www.sweeney-aero.com
youtube.xinhxinh.xyz
zinnia.investments

Other certificates including the domain name exchangedchurch.org

(limited to 100 certificates)
exchangedchurch.org
exchangedchurch.org
shiftcrm.ca
fltd.org
helpnow.ca
yourfreedomfund.org
programming.vc
exchangedchurch.org
sculpit.life
exchangedchurch.org
gaymeetgay.com.exchangedchurch.org
exchangedchurch.org
ronhouse.name
explorerlabible.ca

Certificate

The complete raw certificate details for exchangedchurch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsDTdvxkYchO/bzKBD5D
vkTqg32iVbpZtlrkqyNzTEhmNi5Sbjt1IXJ7bYRrxuGGFwsMNcRbLXu8VtvTA/HX
WXC8pN1xwH6Y8tQ0SI/Tpaq80IBE18luIsJfmQIoqLKfoduiYw/BXwbL1lZl00H3
aSBiEA66iBSmOvif01d9UZTF/PfboRAzTGgRzW0apvdUC6OWuOBmwBKhw6hsTFME
bgFIFad54vYKTxfnUrTCR6knnm4bm0fbWIlJoDUsUsYOa0v/tZy2obThx+0a4MLj
yrKt8XCex1XOh8vYEr59A8nJIomtKB2uMECXmzMGsGhKyrlbsHvG494CXoUirAjs
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382889895192801998490209407449917010247069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 14:59:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 14:59:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchangedchurch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26100176884442661211367000785244671043746240819449280428362154834577733103902472389987351123751929625021440396740303906414136282314670978580250391409546065060800785900172165816084256058239563067885281627417616741833874811853319040564145678644328177813277567377763908255144545935055937292949425568906848930002608908146653316826944707439088906279453323745375910366523569144909735441323503288681113774534870834415415279050055330839948560429393261839485352502847988285442385991946337532916259075220844379841838233849524595486604043138158896787613307244367576633003091227098564972801840950406433989918387846583646882950243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9632733096c11a630e7770976392e9110c140904
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1687 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alainmichaud.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciincontri.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragecourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvidaberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atyli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurangabaddental.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcy-means-test-calculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolo.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bongload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brianjmurphy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captiva.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchsurplus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnfts.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crickettraining.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datingclassified.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamonditis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divergentunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drexpert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthdivorceattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotour.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evansrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangedchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasycostume.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findyourcandidate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreignpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frflanagan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galaxylegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graciefamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcs1920.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiriseroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschooldefenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotporngames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoverboard.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iceland.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianascrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivorypokerpalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justinpaulstark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kontaktannonse.gratis'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamblake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterresellrightsproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayaixchell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdyer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michianagarbage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myperfume.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nafrt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesscounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nm.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norden.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nunchakus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmosparknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panske.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peakedibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearlsoftheocean.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petcits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacyreviewer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacyreviews.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poweredbyrxsugarofficialcertification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rajasthanmatrimony.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rasselas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc-toys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontres.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontresexe.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontressexe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockweedtrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarbitez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicecoronado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcellphonestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialityhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standarddivorce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suncitywindowwashers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theclutterandhoardingpros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tongarealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trailerupholstery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfers.epik.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa-precisionarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnymedicareinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distributedpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.love2hempyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mizuuu.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweeney-aero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youtube.xinhxinh.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.investments'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff893bc9e00000403004730450221009eca85dcc36ecc2dc4df7bd9f8913a071621fcf147fdd283466fa1e05eff126b02203526f32e49be86e588355b6a323eb4dec7fd73bc5fe19a063e59550507c783bc0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff893bc9f000004030046304402207e59ec6a4d946b74ab954b986fa9520ab155c18415b4ce658e61bcf200c8739402203e877712bc278c1ce49d42adb3c6ea6fa73461d6244fb0b443733ef5762e917d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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