saffmark.com

Issued by R3

About this certificate

This digital certificate with serial number 03:62:aa:ca:d4:44:df:4d:db:7c:57:1b:57:93:d1:b3:45:56 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=saffmark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:62:aa:ca:d4:44:df:4d:db:7c:57:1b:57:93:d1:b3:45:56
Serial Number (int): 294911551662109029398951328226758119081302
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:5e:30:da:76:f6:99:6c:99:67:7d:fd:fb:af:43:75:4d:05:b6:be
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 53:a7:f0:a2:8b:cd:b3:65:2a:85:7c:27:69:16:fe:a9:81:11:c7:00
Fingerprint (sha256): dc:a2:85:64:e1:25:df:bd:31:96:34:61:a0:a7:ef:ea:54:2e:97:d7:06:c0:7a:69:59:f0:df:b0:a3:5f:24:6b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate saffmark.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saffmark.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aarbonne.com
*.allagiant.com
*.appleseedcon.com
*.awesomesite.club
*.cellularhub.com
*.chillum.online
*.chuyendong24h.club
*.delluxe.com
*.doisprocedimentos.club
*.drifire.io
*.einthuan.com
*.evy.au
*.grenadine-airways.com
*.henryfirearms.com
*.ipeds.com
*.ir-partner.com
*.irensuchocki.com
*.ironboundrentals.com
*.ironsidepc.com
*.irrisistibleme.com
*.iscrapfloors.com
*.itemsnow.com
*.itmarta.com
*.itpwheels.com
*.jakprint.com
*.japanesecosplayers.com
*.jaquzzi.com
*.jdbyriders.com
*.jeepcheep.com
*.jerybaker.com
*.lineaprevenciontv.com
*.longfordgenealogy.com
*.maximodutti.es
*.omihotels.com
*.onlyinmystate.com
*.oshundidunappearal.com
*.plius500.com
*.pronpix.ru
*.rosreestronline.ru
*.rute303.org
*.saffmark.com
*.samsura.com
*.samtown.com
*.swflamis.com
*.tennmarks.com
*.tweentribute.com
*.twekstore.me
*.xn--pgb2a1a0al.com
*.yatzee.com
*.zealander.net
aarbonne.com
allagiant.com
appleseedcon.com
awesomesite.club
cellularhub.com
chillum.online
chuyendong24h.club
delluxe.com
doisprocedimentos.club
drifire.io
einthuan.com
evy.au
grenadine-airways.com
henryfirearms.com
ipeds.com
ir-partner.com
irensuchocki.com
ironboundrentals.com
ironsidepc.com
irrisistibleme.com
iscrapfloors.com
itemsnow.com
itmarta.com
itpwheels.com
jakprint.com
japanesecosplayers.com
jaquzzi.com
jdbyriders.com
jeepcheep.com
jerybaker.com
lineaprevenciontv.com
longfordgenealogy.com
maximodutti.es
omihotels.com
onlyinmystate.com
oshundidunappearal.com
plius500.com
pronpix.ru
rosreestronline.ru
rute303.org
saffmark.com
samsura.com
samtown.com
swflamis.com
tennmarks.com
tweentribute.com
twekstore.me
xn--pgb2a1a0al.com
yatzee.com
zealander.net

Other certificates including the domain name saffmark.com

(limited to 100 certificates)
saffmark.com
ipeds.com
irensuchocki.com
iranmotors.com
jeepcheep.com
safarbank.com
yatzee.com
yatzee.com
saffmark.com
safarbank.com
isotecacustica.com
ceyptobubbles.net

Certificate

The complete raw certificate details for saffmark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294911551662109029398951328226758119081302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 12:49:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 12:49:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saffmark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757059774098463703534671635740782914191442434482513197151865030828964066989303077695197719729844070957762355767174665371643276460674188069837261165958002672267179150167714577082909530903130904243503749243613319812989105662319651119371922930315748684085524293316621273817134064845419890669198442420639178921068849789210009727981042614597115990242744620580262237199370742910386299116616782627893907034574247718683698970021826141224494573298921469869779460488690426038289410639881067853957804533795361422924849294410106253468518483431705422561988251851616089293905532574871410436573385335528393786114898794480000259777721157532759299833938835969149959895661036744372548549542000784646046434663390919074737231549522164087143168057193831186875743108485497693762688426709555953639862736563588377905455149671173837489081674559942790245930673102740001553236412821005831678280133029628335133607343008947318836386790283614409567968924464686511346677953642749859773812439268043741444690208471573151595827420998751982351471183256638236401073257384801101579458140521790579258060694606210368202351933265024887143774499188114973286034250499213431239467363717058267106826352690763823573754623234470814073487908929884716605319825434546406432738004983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							205e30da76f6996c99677dfdfbaf43754d05b6be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1740 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aarbonne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allagiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appleseedcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awesomesite.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cellularhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chillum.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chuyendong24h.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delluxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doisprocedimentos.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drifire.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.einthuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evy.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grenadine-airways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.henryfirearms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ir-partner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irensuchocki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ironboundrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ironsidepc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irrisistibleme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iscrapfloors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itemsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itmarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itpwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jakprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japanesecosplayers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaquzzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jdbyriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeepcheep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerybaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lineaprevenciontv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longfordgenealogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maximodutti.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omihotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlyinmystate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oshundidunappearal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plius500.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pronpix.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosreestronline.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rute303.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saffmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samsura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swflamis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tennmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tweentribute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twekstore.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--pgb2a1a0al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yatzee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zealander.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aarbonne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allagiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appleseedcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awesomesite.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellularhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillum.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuyendong24h.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delluxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doisprocedimentos.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drifire.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einthuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evy.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grenadine-airways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henryfirearms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-partner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irensuchocki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironboundrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironsidepc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irrisistibleme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iscrapfloors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itemsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itmarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itpwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jakprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanesecosplayers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaquzzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdbyriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeepcheep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerybaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lineaprevenciontv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longfordgenealogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maximodutti.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omihotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlyinmystate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshundidunappearal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plius500.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronpix.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosreestronline.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rute303.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saffmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swflamis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tweentribute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twekstore.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pgb2a1a0al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yatzee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zealander.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f4e2a65eb0000040300473045022005ff4f3a73c206162e6acd2e65a6a2e43960e4cc2311a49f195b04290199ce8f02210085744ef78eda8eafb1df8e2544ef590cddc6eefcd25ca9350d6707ab5d888c830076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f4e2a6609000004030047304502201bc1c2442d695a17973a4770d3741ff338f250e67f189155e8e889d967974c1b022100fbe88b0b8ccbb7940ae7f5722bbaad01bfc12a7777dd299069bd53a61d225cf2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004dd43e870be940a5d16890d624d79c7ffb44a08e49c5f89890f2f92aa406f511f1d1f28ce79bb88420aaa1982dbb46035b2d7740357e55fe998ed3bcf3cdd285599ed105ca7ccdd491c681ca55d00c7c81b679c8c2b31786e1870929638a871703c971d22029e8452b8a7461751579eebf000055b4130f1fb1a6617ae644c2a4788225aa71cc21d698b7672d9ecd521cbb3f31a922579c73aef05542a9270645c9cd0d5f8a461e8eb497a72e9347caace796188342e471321aec2d37f2e54d84f2e874e926d27fe0a53efc7326ced851453e660e55609e92038053fbac07213cb9687e9c5a7eb75758a83360a22c95a4658c5f3e2faec368b6b590bdb2ba3fbf