www.knittingplus.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a7:96:1a:4a:23:60:8c:f0:2d:2f:30:36:3c:94:5b:d6:5d was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.knittingplus.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a7:96:1a:4a:23:60:8c:f0:2d:2f:30:36:3c:94:5b:d6:5d
Serial Number (int): 405475819705624946574314988315119483344477
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1c:6a:8e:b2:cd:e1:14:8a:d0:74:d4:6d:a9:96:01:18:6d:67:cf:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:fe:c9:6c:e2:a5:f6:f7:82:3d:3e:a7:27:33:d7:b2:1a:67:7b:54
Fingerprint (sha256): d8:91:88:67:20:d6:23:b9:26:21:bb:75:02:a1:32:2c:d3:23:55:ec:4c:9d:d7:6a:a1:c8:f4:51:fd:37:f4:e4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.knittingplus.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.knittingplus.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ammanaccommodation.com
bankingbullion.com
buriedgoldprospecting.com
businessdiversification.com
canadalng.org
capetownstory.com
chainadministration.com
charterpartytime.com
citygoldmining.com
colombiashipping.com
commoditiestokenisedoffering.com
cypruspalace.com
definanza.org
emissionsrestriction.com
ethicalquestions.org
fisheriesprotectionvessel.com
freezappa.com
goldandmining.com
goldcoastcultural.com
goldrecoveryprogram.com
goldretrievalsystem.com
ibadanlawyer.com
indonesiagoldmining.com
insearchofhistory.org
jazzandworldmusic.com
kanoclinic.com
kingstownfinance.com
logisticslegal.com
luxuryseafront.com
nnpc.cc
offshorecryptoexchange.com
offshoreqatar.com
phnompenhaccommodation.com
reachoutdesign.com
riskmanagement.io
rivergoldmining.com
royalexchangebitcoin.com
russianports.org
seychellestime.com
skopjeaccommodation.com
studioalbania.com
suisseceo.com
talesofnarnaia.com
theartistband.com
thegoldenageofgreece.com
unitedstatespalace.com
uzbekcompany.com
wagesloans.org
womensparty.org
www.academykenya.com
www.africapalace.com
www.ammanaccommodation.com
www.apiaaccommodation.com
www.buriedgoldprospecting.com
www.businessdiversification.com
www.caketogo.org
www.capetownfinance.com
www.capetownstory.com
www.caribbeanports.org
www.chainadministration.com
www.charterpartytime.com
www.citygoldmining.com
www.comeontome.org
www.commoditiestokenisedoffering.com
www.cypruspalace.com
www.emissionsrestriction.com
www.escrowfinancing.org
www.ethicaldecisions.org
www.firstbecomeeducated.com
www.globalairghana.com
www.goldandmining.com
www.goldcoastcultural.com
www.goldrecoveryprogram.com
www.goldretrievalsystem.com
www.indonesiagoldmining.com
www.insearchofhistory.org
www.israeliconstruction.com
www.knittingplus.com
www.lacrossedesign.com
www.logisticslegal.com
www.nairobiaccommodation.com
www.panamagarden.com
www.phnompenhaccommodation.com
www.reachoutdesign.com
www.riskmanagement.io
www.royalexchangebitcoin.com
www.skopjeaccommodation.com
www.studioalbania.com
www.suisseceo.com
www.talesofnarnaia.com
www.thegoldenageofgreece.com
www.togoclinic.com
www.tradefinancehelp.com
www.unitedstatespalace.com
www.uzbekcompany.com
www.wagesloans.org
www.womensparty.org

Other certificates including the domain name knittingplus.com

(limited to 100 certificates)
www.cryptocasinocruise.org
www.erin-janus.com
zulus.com
www.gradsplus.com
comicvenus.com
domainxfund.com
www.jobsplus.com
academiccryptography.com
naturecureplus.com
trustfundplus.com
www.humanitarianus.com
basrainternship.org
jokervenus.com
trustfundplus.com
www.trustfundplus.com
renewableplus.com
academiccryptography.com
arcticexplorer.org
assetholderplus.com
www.perpetualpayment.io
www.naturecureplus.com
www.offshoretaxplus.com
www.naturecureplus.com
bookplus.com
www.coriolanus.com
naturecureplus.com
naturecureplus.com
www.suisseceo.com
www.coriolanus.com
blockchainrental.org
jokervenus.com
www.panamagarden.com
www.campusvilnius.com
zulus.com
silverplusplus.com
wagesloans.org
www.modernartplus.com
www.apiaaccommodation.com
academiccryptography.com
www.radiophoneplus.com
www.knittingplus.com
www.gccturkey.com
infinitesimalcalculus.com
jokervenus.com
www.escrowfinancing.org
donotbeevil.org
sarakutulus.com
www.togoclinic.com
www.coriolanus.com
jokervenus.com
www.medicalclinics.com
naturecureplus.com
familyfm.com
campusvilnius.com
www.francefarming.com
renewableplus.com
www.campusvilnius.com
www.knittingplus.com
www.shippingeconomist.com
newyorklegal.net
www.extraordinarygenius.com
www.knittingplus.com
www.coriolanus.com
www.naturecureplus.com
www.modernartplus.com
www.miningplus.com
jokervenus.com

Certificate

The complete raw certificate details for www.knittingplus.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkswbBKwCGc5P12Hf8l0
bLNcMw4yLlP8eSeUEp9TiOOllGmbRRH6G7ZqKY78eTMFNJDvqDPFGRyOaTlekPB2
Aket4TZFYTP+mkVoCcP63C1iLM7hlWi3J560JITTRDAiLpFjjYAT0P8pTkFFW6++
pHpVpu0YhUCQVg4Nq9N8tEcLat6vXpb9EWeZUTMArNE49FOfCf9AhGdUTPK+cRlL
pwQBmP3y7zH+ysGCYJB35FNKoqqP6otWbucB5TXsr8Ybgn8trrTm11GuATg6A5Rm
Gjnh0CDsvC1sk7K2VOXE5Y5bMH2ujfAqLer1ofN6rVoLd5MzllXW5+z3xgQte7Cb
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405475819705624946574314988315119483344477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 11:33:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 11:33:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.knittingplus.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22002542215381561868861065055544822503784058752798166509520228615673086536972789299914740321739389777663244402929332446523920367962081502857425688963969895013671207063541122628207677882550226818527753059006539558899359028016016693403482857543100526173074700103999724526808956199906602754550135795794376609377093669828647300390966392341834490218216654413825844408986364532423720060875505177705074363462672876081184307712423741794162131916299365943829096605784838729539048131145023844690733271287216326805425488457699477784838845768090962143511347484273348089944244970566794280494899071158148969545754999213719601322981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c6a8eb2cde1148ad074d46da99601186d67cf2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2286 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ammanaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingbullion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buriedgoldprospecting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessdiversification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadalng.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capetownstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chainadministration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterpartytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citygoldmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colombiashipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commoditiestokenisedoffering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypruspalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'definanza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emissionsrestriction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethicalquestions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisheriesprotectionvessel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freezappa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldandmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcoastcultural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldrecoveryprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldretrievalsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibadanlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indonesiagoldmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insearchofhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazzandworldmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanoclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingstownfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logisticslegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuryseafront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnpc.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorecryptoexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreqatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnompenhaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reachoutdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskmanagement.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivergoldmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalexchangebitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russianports.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seychellestime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skopjeaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioalbania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suisseceo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talesofnarnaia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartistband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegoldenageofgreece.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedstatespalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzbekcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagesloans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womensparty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academykenya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africapalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ammanaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apiaaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buriedgoldprospecting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businessdiversification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caketogo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capetownfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capetownstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caribbeanports.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chainadministration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterpartytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citygoldmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comeontome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commoditiestokenisedoffering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypruspalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emissionsrestriction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escrowfinancing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethicaldecisions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstbecomeeducated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalairghana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldandmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldcoastcultural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldrecoveryprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldretrievalsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indonesiagoldmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insearchofhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.israeliconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knittingplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacrossedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logisticslegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nairobiaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panamagarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phnompenhaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reachoutdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskmanagement.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalexchangebitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skopjeaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studioalbania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suisseceo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talesofnarnaia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegoldenageofgreece.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togoclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradefinancehelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedstatespalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzbekcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wagesloans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.womensparty.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d9d4efe660000040300473045022100a2a7d2899443b914f6c80126d24feb8be61a47b05b4263bdae97be4c7604680c0220410337068772f893c3fe7036fc80c624f30c11eae73f5b67153f66627836638000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d9d4efffb0000040300463044022072148cf8aae5bc17aa66224c73879dcc1a6726a4d88964b24f1df1508991a7ae02200145f52ddbcb132de3e3f1d314ac2aea1b0088fd7e02d94712087a0ebfd6da60
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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