gemportal.org

Issued by R10

About this certificate

This digital certificate with serial number 04:9e:4d:3a:1f:c9:e2:ec:95:c6:2b:88:c3:86:a7:af:36:53 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gemportal.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9e:4d:3a:1f:c9:e2:ec:95:c6:2b:88:c3:86:a7:af:36:53
Serial Number (int): 402316410054192285360495000179758060222035
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:cb:94:f7:71:f4:5a:89:61:6d:55:50:4d:a2:39:09:78:96:bb:6e
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 12:38:b9:ad:64:fe:c3:ed:a1:d2:57:cc:e5:55:ae:d9:19:f5:33:33
Fingerprint (sha256): d7:ff:75:6c:d3:80:f2:26:31:e9:50:af:b5:9c:6c:56:d1:5b:bf:7d:01:c6:10:c1:1a:d2:df:72:8e:f9:a2:a5

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate gemportal.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gemportal.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.11234.cc
*.1mlink.biz
*.200pfaceit111.biz
*.amvena.com
*.apuestasdeportivasz.com
*.argod.uk
*.atlantaroomescape.com
*.btgigs.info
*.canada-casino-online.com
*.cannabisbigdata.co
*.country-dancing.com
*.crocketthall.com
*.ctsix.org
*.curecrate.co
*.desform19.org
*.emailaprisioner.com
*.expireddomais.com
*.france-justice.org
*.freelornhdonline.com
*.gemportal.org
*.glibalcashcard.com
*.gmtunersource.com
*.houseremodelingsolution.org
*.hynundai.com
*.jlwiz.com
*.logmein1233.com
*.malaksound.com
*.marleyspon.com
*.marymount.net
*.minoxidil.me
*.misteritogel.me
*.mobifest.net
*.nedlc.org
*.nitrogen2011.org
*.nudgeforchange.com
*.ohiobasketballclub.com
*.ovagc.com
*.picslr.com
*.pncpersonalbanking.com
*.pubgabariers.com
*.redbluepurple.io
*.scy18.net
*.sdmoviespoint.show
*.slygsfw.com
*.stevesdesktopphotography.com
*.superbrands.uk
*.symmetrixsalon.com
*.todd4senate.org
*.travelgard.com
*.wwwllandsend.com
11234.cc
1mlink.biz
200pfaceit111.biz
amvena.com
apuestasdeportivasz.com
argod.uk
atlantaroomescape.com
btgigs.info
canada-casino-online.com
cannabisbigdata.co
country-dancing.com
crocketthall.com
ctsix.org
curecrate.co
desform19.org
emailaprisioner.com
expireddomais.com
france-justice.org
freelornhdonline.com
gemportal.org
glibalcashcard.com
gmtunersource.com
houseremodelingsolution.org
hynundai.com
jlwiz.com
logmein1233.com
malaksound.com
marleyspon.com
marymount.net
minoxidil.me
misteritogel.me
mobifest.net
nedlc.org
nitrogen2011.org
nudgeforchange.com
ohiobasketballclub.com
ovagc.com
picslr.com
pncpersonalbanking.com
pubgabariers.com
redbluepurple.io
scy18.net
sdmoviespoint.show
slygsfw.com
stevesdesktopphotography.com
superbrands.uk
symmetrixsalon.com
todd4senate.org
travelgard.com
wwwllandsend.com

Other certificates including the domain name gemportal.org

(limited to 100 certificates)
gemportal.org
sentinelfcu.com
gemportal.org

Certificate

The complete raw certificate details for gemportal.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402316410054192285360495000179758060222035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 18:40:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-04 18:40:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gemportal.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741578368622710875005411499586246787903307853897069835228705175675699840811361604393680853413003139479146838735439800010611474328899191561191807198083558202042030428250659423985903697425489363478877131185990955837148401263585514666385259781263346490511635214956497443545876384651450846600251684257179654448678188407238261932172848866785860097699984623887398387090516627634883734530735160737004651647183627240720723420739886921252598275353181680257931553654653053925195665620552513244584570341276057499223519166583583465911846951537054950369313414199676628815405916186783863921868257218376189870208011387191649772490513252452611299798542661661668600125862785861844830341736329343969417933608617661448714041111644467387649189214413797657611801629847452648707509612425936625588517379688550742741173199331446518928361743018758053512826410756688306455916661148696816914932761858092852712804792602125701818491553374602395832226728574639902609144127895621446165863846040602127295225971245246021386452822911212711268053841865137046844750225191382317764823370905047792946759707991198745441013437740051617697246699065389761257938878097663902475221020729585772272530239558558114618411065380485243494877122543695037323312811823533517325509554177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2cb94f771f45a89616d55504da239097896bb6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.11234.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1mlink.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.200pfaceit111.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amvena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apuestasdeportivasz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argod.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantaroomescape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btgigs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canada-casino-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannabisbigdata.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.country-dancing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crocketthall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctsix.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curecrate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desform19.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emailaprisioner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expireddomais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.france-justice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freelornhdonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemportal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glibalcashcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmtunersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houseremodelingsolution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hynundai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jlwiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logmein1233.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malaksound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marleyspon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marymount.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minoxidil.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.misteritogel.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobifest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nedlc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nitrogen2011.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nudgeforchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohiobasketballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovagc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picslr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pncpersonalbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pubgabariers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redbluepurple.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scy18.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdmoviespoint.show'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slygsfw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevesdesktopphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superbrands.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symmetrixsalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todd4senate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelgard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwllandsend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '11234.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1mlink.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '200pfaceit111.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amvena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apuestasdeportivasz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argod.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantaroomescape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btgigs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canada-casino-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisbigdata.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'country-dancing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crocketthall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctsix.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curecrate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desform19.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailaprisioner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expireddomais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'france-justice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelornhdonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemportal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glibalcashcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmtunersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseremodelingsolution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hynundai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlwiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logmein1233.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malaksound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marleyspon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marymount.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minoxidil.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misteritogel.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobifest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedlc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitrogen2011.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nudgeforchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohiobasketballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovagc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picslr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pncpersonalbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubgabariers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbluepurple.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scy18.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdmoviespoint.show'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slygsfw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevesdesktopphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superbrands.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symmetrixsalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todd4senate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelgard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwllandsend.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fef10f035000004030047304502205c38365fb93d016d589a813d1f382bf150497548d6936cd9d9b4575095262d4d022100ef0920af6d2d17db988fee047180a334caa9ddefb25843059a2d19855ffb2514007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fef10f1500000040300473045022100d1af51e11b3497e6bb285ca7ae97673a58d818d1b129d27c3837c09efae54ee60220546dcf2f2a1d7e10dc691eea1516c92d45324d7092fa2d26d0c53e06c84820ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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