freedomap.ca

Issued by R11

About this certificate

This digital certificate with serial number 04:c7:0f:69:86:09:2b:15:46:8f:46:16:eb:dd:23:2d:83:f6 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=freedomap.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:c7:0f:69:86:09:2b:15:46:8f:46:16:eb:dd:23:2d:83:f6
Serial Number (int): 416185821073983934638727031976295482098678
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b6:e4:79:44:f6:dd:cb:62:02:de:a8:c4:15:46:cb:19:ea:95:60:02
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 13:c2:dc:44:25:37:5c:a8:86:06:43:be:34:ed:7e:c8:07:18:be:f5
Fingerprint (sha256): de:02:c3:da:7e:08:9b:8a:77:6d:38:27:04:fb:8f:e1:eb:2a:98:67:26:35:78:2d:9d:4e:2a:cc:b0:0c:2d:4f

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate freedomap.ca

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for freedomap.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

420turnpike.com
5ddefence.com
aacconservation.org
allprocleaningservices.com
altekami.com
andhradental.in
arbitragefoundation.com
arbitragehedgefunds.com
austaron.com
badassautomotive.com
bidpride.com
bikers-wallet.com
bitcoinsmanagement.com
bruteware.com
cactusbuilding.com
campbellstation.com
cannabishempworks.com
castaxpro.com
cavaliercounty.com
charlottemuslim.com
chavezreunion.info
cherrito.com
colinmaher.com
craigsville.com
dallaspublicadjusters.com
dowagiacdumpster.com
drinksthatshrinkyourbelly.com
dubiouspod.org
efiling.org
fabulousmansion.com
famousgolfcourses.com
flowers-florist.com
freedomap.ca
fructose0.com
garagekingsmyrtlebeach.com
glucosescore.com
go2news.com
grangerdumpster.com
greedyratstudios.com
groomercrat.com
gulge.com
hempq.com
henryhazlitt.org
hnp.co.in
hoardinginstitute.com
homesecuritynevada.com
iberiaparish.com
ileana.in
intuitivepress.com
iroquoiscounty.com
lacquiparlecounty.com
latticemagnets.com
livoniaautoinsurance.com
lmj.co.in
loverslanes.com
mcdowellcounty.com
megapricks.com
metcalfecounty.com
miraclemethodmyrtlebeach.com
mtjulietnaz.com
mygrandmasfudge.com
nameyourbully.com
naturehq.com
nickbelldesign.com
oaklandelderlaw.com
organicsoiltreatment.com
pandararoadmarket.in
photographylibertytownship.com
planetcondo.com
primeve.com
professionaldominoes.com
reynoldscounty.com
rx-discounts.com
rxsugarissweetandhealthy.com
rxsugarswealthycereal.com
rxsugarww.com
sacramentostables.com
sagreatlawyers.com
saleslounge.com
sarpyconservatives.com
showsummit.com
soberhotel.com
sqwerty.com
stflanaganinstitute.com
stpetebeachseo.com
strawbearee.com
studentenergy.com
techozen.org
texasappraisal.com
thechurchsolution.com
thenewjerseyassembly.com
thepigtrail.com
thesocialremodel.com
theutilitylocator.com
whatphoneydogpooh.com
workinginitaly.com
www.highscale.com
www.judeaandsamaria.com
www.myincredibleopinion.com

Other certificates including the domain name freedomap.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for freedomap.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FtDVdHMspDi8flCf5Np
qePSlHfQCrnhl9Db12k76K7bp8m50rlirUhasSvlOx4B95lM00XFBWjnwrftKHLQ
jyaODn9nbb+NZrAGRzU4EChUVoAQJYCIHgSugIaEAThSt1X2NcN0uCVCukiwCS2/
24++WTxsmGlz7SBtsr4IJ1Bbr+ygF2qEm6lXhqfmjpC+NNG0+y6LnoSfrMplqgXn
MiCwzlyKFYgo9wmdXpcFFpbwZKXevu61Lz+kBHU6ib7H9cNSn03eeF+bW6S2u+c2
chFUyTzjKT85GZJg6yndw+LiWeFlQ++F3+i99CAQIhx1/MH01NnjMw5n8+08gR/W
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416185821073983934638727031976295482098678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 09:34:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 09:34:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freedomap.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27312477349202313741054566639895748193637533885811307812641850681494931559985286342151389244581193319548832482848379051147921558226208995514179398997220108086862126674898078828325513855819318354043350200296574137924301140721985582721651041737533761742706195455507808202928322052060999586014175719461542701989999671528636387765539581657596660649460366303626107435370458295940542205695271993853808804526955770658052214070316704049052171106882994448586607992544158165783534411624201176823745284355573347475907824422671136969385292309954393206258824565849020827705588073017136061705179219067749080568307547222276990555651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6e47944f6ddcb6202dea8c41546cb19ea956002
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1962 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '420turnpike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5ddefence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aacconservation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allprocleaningservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altekami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andhradental.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragefoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragehedgefunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austaron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badassautomotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidpride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikers-wallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinsmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bruteware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cactusbuilding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campbellstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabishempworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castaxpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavaliercounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottemuslim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chavezreunion.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherrito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colinmaher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craigsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallaspublicadjusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dowagiacdumpster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinksthatshrinkyourbelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubiouspod.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efiling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabulousmansion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'famousgolfcourses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowers-florist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomap.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fructose0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garagekingsmyrtlebeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glucosescore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go2news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grangerdumpster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greedyratstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groomercrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gulge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henryhazlitt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnp.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoardinginstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesecuritynevada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iberiaparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ileana.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuitivepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iroquoiscounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacquiparlecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latticemagnets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livoniaautoinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loverslanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdowellcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megapricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metcalfecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miraclemethodmyrtlebeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtjulietnaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygrandmasfudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nameyourbully.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickbelldesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaklandelderlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicsoiltreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandararoadmarket.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photographylibertytownship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetcondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primeve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionaldominoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reynoldscounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rx-discounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarissweetandhealthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarswealthycereal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarww.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacramentostables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagreatlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saleslounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarpyconservatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showsummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soberhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqwerty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stflanaganinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpetebeachseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strawbearee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techozen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasappraisal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thechurchsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenewjerseyassembly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepigtrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesocialremodel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theutilitylocator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatphoneydogpooh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workinginitaly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highscale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.judeaandsamaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myincredibleopinion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff243fc610000040300473045022100f1fafa2ce9222ee18e682f5ba298275bd7503ab7565d09d75c132c34b9aba28b02200baff417e2427870876e9213c4c054ee99e88fa48470cdf5a52ee8fd0d41c4b400760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ff243fc8e0000040300473045022100e9346ab14afdf6e285584ef78d3c48649748504073631643533219004366be8f02207c353fcad0cf1e86a8907c11d0ab469a71b4033be173d970a8a08fa14f06349a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0036446cb45238aab303383f64187d0e814777a1e0ce4833bc39a12c5326723d22185c410f6e04cccd9e598620fae0e951f3acd2eb8fd3a48d77f469dc61b577d6d87216e11916404fd0a83dcd2087bd26460790ef94d7a4ce1df0575e62dc55ec00d6d6e48f9d748aa657eef6a687447b4596044191596b46cee02424107b2369a122223d66a1f808d235c50964374de41f2db48c32f52d9f0b6ad848bae73838bb9317f3820b9b111756f9b4aecac1ced1d5cddc1cee505a7c5ddfa32107b639e40e6472faa9436dde0ae5f1f42f68035ca477d420dc9052c49b850996dbced6e85cd0ded54614500125f1c1bf917c4ca11d6e312b025882c1e80bdc34a90d08