www.minhtuyet.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:09:c6:e2:7c:07:af:6f:10:82:bc:9c:ae:e6:1a:c9:ea was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.minhtuyet.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:09:c6:e2:7c:07:af:6f:10:82:bc:9c:ae:e6:1a:c9:ea
Serial Number (int): 312051926186891866193261822046517568653802
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:9b:3c:0e:26:40:5a:e6:63:12:84:1f:25:a0:a7:57:a2:1a:bc:eb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fc:b7:9b:ee:01:49:b0:f5:81:59:b7:ba:fd:10:a4:78:47:6c:50:f9
Fingerprint (sha256): d1:10:1a:32:4c:89:08:08:d9:15:89:4d:84:6a:e4:b8:96:cd:8a:c0:fb:22:dc:3e:a2:7a:20:73:3a:c2:85:99

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.minhtuyet.net

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.minhtuyet.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbitrageplus.com
assetmanagementsoft.net
berlinsart.com
berlinsarts.com
chiclayonews.com
chinaredlight.net
cleanenergycoastal.org
clubbolly.com
cognitivesoft.net
coinminingcorp.com
communityasset.net
economyflight.net
firefightingaircraft.net
frackinggroup.com
healthcaredrop.com
indonesiacargo.com
intelligencework.org
intermodalfreight.net
krasnodarnews.com
luxuryflight.net
malagastyle.com
marinesgov.com
maritimefreight.net
meknesnews.com
menfight.net
mexicooffshore.org
militarygradelight.net
minhtuyet.net
museumoflight.net
omahafarming.com
palestinevideo.com
parischarity.com
riskinsurance.net
solarasset.net
solarpoweredyacht.net
solarpowerflight.net
solarpoweryacht.net
southkoreastyle.com
sowetoschool.com
studentloansoft.net
studentschat.net
tankership.com
teesport.com
viennapost.com
vipflight.net
vipworkout.com
wamd.com
www.arbitrageplus.com
www.assetmanagementsoft.net
www.athensbusinessnews.com
www.berlinsart.com
www.berlinsport.com
www.chinaredlight.net
www.cleanenergycoastal.org
www.clubbolly.com
www.cognitivesoft.net
www.coinminingcorp.com
www.communityasset.net
www.cuzconews.com
www.economyflight.net
www.firefightingaircraft.net
www.gasdomainmarkets.com
www.gradchat.net
www.healthcaredrop.com
www.indonesiacargo.com
www.intelligencework.org
www.intermodalfreight.net
www.krasnodarnews.com
www.luxuryflight.net
www.marinesgov.com
www.maritimefreight.net
www.meknesnews.com
www.menfight.net
www.mexicooffshore.org
www.militarygradelight.net
www.minhtuyet.net
www.mongoliaholidays.com
www.museumoflight.net
www.nyccharity.com
www.palestinevideo.com
www.royalfamilyprivate.com
www.secretbrooklyn.com
www.solarasset.net
www.solarpoweredyacht.net
www.solarpowerflight.net
www.solarpoweryacht.net
www.southafricastyle.com
www.southkoreastyle.com
www.sowetoschool.com
www.studentloansoft.net
www.tankership.com
www.teesport.com
www.vipflight.net
www.wamd.com

Other certificates including the domain name minhtuyet.net

(limited to 100 certificates)
www.museumoflight.net
www.museumoflight.net
www.luxuryflight.net
mexicooffshore.org
www.museumoflight.net
coinminingcorp.com
hokibitcoin.com
www.gradchat.net
militarygradelight.net
www.solarasset.net
hokibitcoin.com
teesport.com
solarasset.net
vipworkout.com
minhtuyet.net
communityasset.net
www.teesport.com
firefightingaircraft.net
www.berlinsport.com
wamd.com
www.solarpowerflight.net
www.prideintheircraft.net
solarpowerflight.net
www.southkoreastyle.com
execflight.net
offshorelift.net
www.museumoflight.net
monetarytheft.net
www.museumoflight.net
www.minhtuyet.net
www.chinaredlight.net
www.solarasset.net
menfight.net
www.offshorelift.net
www.healthcaredrop.com
www.korikibitcoin.com
minhtuyet.net
www.museumoflight.net
ufocraft.net

Certificate

The complete raw certificate details for www.minhtuyet.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pLQs0w2cv5OK8e7mr6q
P6zz25TXP44n8eLZa/hm/h9MQmRym5As29C3y2t6olFH0isfdGiAz8IDp4YVLgZO
8AbqSxzAt8LJUiVe7PDW6yzq2Df7cSFqr5w2hz2vz7N33KqB5D27p1rwZFnTf1EW
MWpc/zOtTD5Y9kBlkzYx2/ndi5CEpyfhr9Mr4wQotl1QHJTOH5glxJx5ejCbBx1G
8W07n/hK6uXqZZT8EboIgmD7tGuPI9JCDJPmyxfM2ZssupJFfWF38Mt/AGzpBfMb
36FLwucM2b5gl1p8jHCvxwTeFDjWvT9wPc8qrweqoAcrrD7pJS8wAC2aC+fTOfFO
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312051926186891866193261822046517568653802
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 11:35:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 11:35:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.minhtuyet.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27087394553825997731508785343849812089107077847557398894468753773699553811367593866933602152957956828835545297358254285036202336259237133346609013831091864327644717585942366358929692755265530848955293154478437020890968010522387670080955283166263675585400290790529704536820528491216420084734215348874056474226289888549891667815841355320742390175881933941354405046725896983128675968633659840267557515291727556850531885852640469275155871529320498616343372757910370464662754028928454896317565901768665059959739017268718082226810204504117249451598633725880319892430322273067002077909799441571004523544022284954207182212757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a29b3c0e26405ae66312841f25a0a757a21abceb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1976 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagementsoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinsarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiclayonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaredlight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanenergycoastal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubbolly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognitivesoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinminingcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityasset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economyflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firefightingaircraft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frackinggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcaredrop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indonesiacargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligencework.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermodalfreight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krasnodarnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuryflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malagastyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinesgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritimefreight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meknesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menfight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mexicooffshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militarygradelight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minhtuyet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museumoflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omahafarming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palestinevideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parischarity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskinsurance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarasset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarpoweredyacht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarpowerflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarpoweryacht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southkoreastyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sowetoschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentloansoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentschat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teesport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viennapost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipworkout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wamd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arbitrageplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagementsoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athensbusinessnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinsport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaredlight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleanenergycoastal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubbolly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cognitivesoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coinminingcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communityasset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuzconews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economyflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firefightingaircraft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gasdomainmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gradchat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthcaredrop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indonesiacargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intelligencework.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intermodalfreight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krasnodarnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxuryflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marinesgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maritimefreight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meknesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menfight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mexicooffshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.militarygradelight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minhtuyet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mongoliaholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museumoflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyccharity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palestinevideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalfamilyprivate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretbrooklyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarasset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarpoweredyacht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarpowerflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarpoweryacht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southafricastyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southkoreastyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sowetoschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentloansoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tankership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teesport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vipflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wamd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001692ef4307f000004030047304502205e1fdc8b5c18140a7be08a486daadac339456e237586a3d378c84dbeb478335b022100d43eefb2fb38e667b0d1d22aa05dc0dd5baa9cb1026de16850527d06de259b9e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001692ef432c00000040300473045022043c5a7ec73a16565fc60bc938c90322be48a8b49519ecbe2ae34dfe3e0184e31022100fa5e6cb95dad5938faafd9583989d88f4367e3f65e0fce9596c26000a2ba83a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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