www.documentarycanal.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e9:e8:83:af:1f:5d:e4:13:27:8e:d4:7b:c7:70:99:82:fb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.documentarycanal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:e8:83:af:1f:5d:e4:13:27:8e:d4:7b:c7:70:99:82:fb
Serial Number (int): 340931713925676781980210456835759120417531
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:b6:0a:7b:f2:16:75:9e:3a:08:7b:17:6a:55:65:1b:25:eb:38:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 82:b9:2e:23:61:91:6c:f7:dd:5b:db:57:7a:3c:5b:e7:bd:53:e5:8c
Fingerprint (sha256): d5:02:7b:d3:f2:27:43:db:b2:4a:b4:63:45:cd:b4:43:79:41:2c:50:8b:3d:be:0a:2a:aa:fc:dc:db:82:06:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.documentarycanal.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.documentarycanal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

19thcenturywritingdesk.com
acceptchange.net
adelaideexpo.com
alaskadaily.com
animatedindustry.com
antiquewritingdesk.com
bigsurenergy.com
braziliancook.com
breakwaterbuild.com
casiadaily.com
casinopanamacity.com
cinnamonchallenge.net
colombostockexchange.net
cranebarge.net
czechrepublictv.com
defencesecretary.com
documentarycanal.com
farsilovestory.com
felonsonline.com
filmsreview.com
hydrogenclinic.org
interactivexchange.net
intercoinexchange.net
intercoinexchnge.net
iraq-daily.com
irresponsibleregimechange.net
jerusalemdaily.com
lapazattorney.com
macphotoeditor.com
malaysiadj.com
marineemploy.com
menloparkdaily.com
menloparkfamily.com
mineral-drink.com
mississaugaluxury.com
nucleararmy.com
oaklandpolicescandal.com
offshorecoinexchange.net
onlinepersonal.com
palestineenergy.com
publicnatural.com
punnvorr.com
reykjavikscholarship.com
saudiimmigration.com
teamfiduciary.com
tobaccostory.com
utopiadaily.com
vanitydaily.com
videoexchange.net
wavepowerplant.net
worldartcollege.net
worldwidethrifty.com
www.19thcenturywritingdesk.com
www.acceptchange.net
www.angolaoffshorecompany.com
www.antiquewritingdesk.com
www.bigsurenergy.com
www.breakwaterbuild.com
www.casiadaily.com
www.casinopanamacity.com
www.cinnamonchallenge.net
www.colombostockexchange.net
www.cranebarge.net
www.defencesecretary.com
www.documentarycanal.com
www.farsilovestory.com
www.felononline.com
www.filmsreview.com
www.guernseyattorney.com
www.helsinkischolarship.com
www.hydrogenclinic.org
www.interactivexchange.net
www.intercoinexchange.net
www.intercoinexchnge.net
www.iraq-daily.com
www.irresponsibleregimechange.net
www.jerusalemdaily.com
www.lapazattorney.com
www.macphotoeditor.com
www.marineemploy.com
www.menloparkdaily.com
www.menloparkfamily.com
www.mineral-drink.com
www.oaklandpolicescandal.com
www.offshorecoinexchange.net
www.offshorehawaii.com
www.onlinepersonal.com
www.palestineenergy.com
www.pereiratv.com
www.publicnatural.com
www.punnvorr.com
www.saudiimmigration.com
www.teamfiduciary.com
www.tidalcurrents.net
www.utopiadaily.com
www.vanitydaily.com
www.videoexchange.net
www.worldartcollege.net
www.worldwidethrifty.com
yshanghai.com

Other certificates including the domain name documentarycanal.com

(limited to 100 certificates)
yshanghai.com
gamescanal.com
wavepowerplant.net
wavepowerplant.net
offshoresubcontractors.com
defencesecretary.com
www.livewncanal.com
www.onlinepersonal.com
www.guidemerchant.com
sportscanal.com
www.cranebarge.net
www.italycanal.com
hydrogenclinic.org
www.businesscanal.com
www.italycanal.com
www.palestineenergy.com
breakwaterbuild.com
www.sportscanal.com
antiquewritingdesk.com
www.helsinkischolarship.com
www.bestcanal.com
www.iraq-daily.com
www.allcanal.com
19thcenturywritingdesk.com
www.livewncanal.com
cranebarge.net
www.italycanal.com
www.antiquewritingdesk.com
www.italycanal.com
www.italycanal.com
www.sportscanal.com
www.italycanal.com
vacationcanal.com
utopiadaily.com
www.guidemerchant.com
hydrogenclinic.org
19thcenturywritingdesk.com
www.allcanal.com
www.lapazattorney.com
19thcenturywritingdesk.com
jerusalemdaily.com
www.mineral-drink.com
www.documentarycanal.com
www.punnvorr.com
teamfiduciary.com
19thcenturywritingdesk.com
publicnatural.com
muhldorf.com
yshanghai.com
milanocanal.com
defencesecretary.com
parissoul.com
www.guidemerchant.com
www.guernseyattorney.com
braziliancook.com

Certificate

The complete raw certificate details for www.documentarycanal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7Q4SSR9LCMlFtnzuL3O
SNY4/P+m/faTm+H7WhRDaqahoHvz/PSV052RFode9HdZO3/nz8WdLOtSaUYezasw
d+ptsDFY3RzWYgrj1yHnGnuvHNraAwi90HzM9lpZljDuuGHVXajde+xhtdq+LcOW
z+JPSRo59R4saQ2Eg82tk3TQthl/S66Ui/eEuV1p6Nj2P48zR6a850iibqvOD2fu
hW8QPXJyKepjF6yNgaiYr7SagFTtYjGgKE5qJPEDYk7AXwsxlxv4S8cd4TmP6mVN
IlPgBxt1viKoJc+uPVRXkFHiWvMI4RL4A/WQPBlBvz+JApzTIXbx828pmCW4HO04
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340931713925676781980210456835759120417531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-05 10:37:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-04 10:37:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.documentarycanal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26220198856151660887515787981671687645038207625016411840134336029956971535712755426698893290276381298056992000527088451463776575509838372562617032258082274889259933778657204133013184583156461197852357715104825404100435516182086855753606763161804880991690457172635290487273124779185441530385054192706139083151178820689289131425575083835952303785752644551645352660513632392789715573544509259818689755206374632214851414039729151487468360198848875066238494272519043755577606830325614873787203109800447706792636092352158860285168455268118310637264766946860410560426099794347282631233597112398067504640360439146331279013891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51b60a7bf216759e3a087b176a55651b25eb38de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '19thcenturywritingdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adelaideexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskadaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animatedindustry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiquewritingdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigsurenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braziliancook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakwaterbuild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casiadaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinopanamacity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinnamonchallenge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colombostockexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cranebarge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czechrepublictv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defencesecretary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentarycanal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farsilovestory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felonsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmsreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrogenclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactivexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercoinexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercoinexchnge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iraq-daily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irresponsibleregimechange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerusalemdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapazattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macphotoeditor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malaysiadj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marineemploy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menloparkdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menloparkfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineral-drink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mississaugaluxury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nucleararmy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaklandpolicescandal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorecoinexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinepersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palestineenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicnatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punnvorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavikscholarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saudiimmigration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamfiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tobaccostory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utopiadaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanitydaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavepowerplant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldartcollege.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldwidethrifty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.19thcenturywritingdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acceptchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angolaoffshorecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antiquewritingdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigsurenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakwaterbuild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casiadaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinopanamacity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinnamonchallenge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colombostockexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cranebarge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defencesecretary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.documentarycanal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farsilovestory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.felononline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmsreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guernseyattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkischolarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrogenclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interactivexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intercoinexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intercoinexchnge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iraq-daily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irresponsibleregimechange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerusalemdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapazattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macphotoeditor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marineemploy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menloparkdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menloparkfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mineral-drink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oaklandpolicescandal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorecoinexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorehawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinepersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palestineenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pereiratv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicnatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punnvorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saudiimmigration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamfiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tidalcurrents.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utopiadaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanitydaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videoexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldartcollege.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldwidethrifty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yshanghai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169ed4a2cb50000040300483046022100cc2723f04d291e86eaae9217dc046e21aa06fa8f7d3bfd8235675bfb6514dce3022100911a393d10cfd01a570e46fb9cff391b11698d5434d56677ab43b938aa82eb57007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169ed4a2c97000004030046304402201c6bb847eaa4aa4468136467cd4a85d5a74821aac491950426562f84dff4748b02202b43cb50e61976b51196b68f0c12ee05fe1a70cfb081d8e01fb533bf31462d8a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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