stpaulsfallcreek.org

Issued by R3

About this certificate

This digital certificate with serial number 04:da:f4:3c:7c:7c:d1:af:2f:8a:2f:3d:96:f4:3b:9a:be:09 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stpaulsfallcreek.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:da:f4:3c:7c:7c:d1:af:2f:8a:2f:3d:96:f4:3b:9a:be:09
Serial Number (int): 422955345409496580342304786713186259353097
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c4:05:4c:ed:6b:18:41:e4:aa:b3:77:fa:e7:69:76:0b:d8:58:66:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:f8:6f:5c:7e:46:0f:7e:54:91:29:bb:55:e5:62:9e:4b:9f:3f:56
Fingerprint (sha256): e4:8b:42:2c:28:34:7b:bd:5b:a1:3c:9f:e8:a0:78:66:11:45:28:25:23:74:ce:6f:b8:ab:3c:52:07:66:c8:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stpaulsfallcreek.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stpaulsfallcreek.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1219.au
*.123upupup.com
*.albumdl.net
*.allenadmonds.com
*.antgarner.com
*.anthropec.com
*.assistedtraders.com
*.bastropisd.com
*.beverify.com
*.bobbyselectricalservice.com
*.bullochnews.com
*.cbdata.com
*.chenangocountynews.com
*.cocamovie.com
*.covisualize.com
*.eyebuydirecf.com
*.girlsonswim.com
*.glynnnews.com
*.greekautoparts.com
*.hackstation.com
*.hdmovi99.com
*.heiner.top
*.honeymoon.net
*.jacksonautoinsurance.co
*.javtoful.co
*.knucks-asianpub.com
*.leecountygov.com
*.likedln.com
*.omingroup.com
*.pinotgris.com.au
*.predije.com
*.preperrecon.com
*.print.com.au
*.quarterhoarder.com
*.saslows.com
*.sharonkwok.com
*.shelfsavvu.com
*.shwann.com
*.southcarolinareport.com
*.stpaulsfallcreek.org
*.studio-gidoo.com
*.suitesolution.tv
*.surebets.online
*.testflight.live
*.thebenfitsexpert.com
*.tonyroberts.com.au
*.trackingdifference.com
*.vicidceleb.com
*.voipbrisbane.com.au
*.yt-thumbnail-download.online
1219.au
123upupup.com
albumdl.net
allenadmonds.com
antgarner.com
anthropec.com
assistedtraders.com
bastropisd.com
beverify.com
bobbyselectricalservice.com
bullochnews.com
cbdata.com
chenangocountynews.com
cocamovie.com
covisualize.com
eyebuydirecf.com
girlsonswim.com
glynnnews.com
greekautoparts.com
hackstation.com
hdmovi99.com
heiner.top
honeymoon.net
jacksonautoinsurance.co
javtoful.co
knucks-asianpub.com
leecountygov.com
likedln.com
omingroup.com
pinotgris.com.au
predije.com
preperrecon.com
print.com.au
quarterhoarder.com
saslows.com
sharonkwok.com
shelfsavvu.com
shwann.com
southcarolinareport.com
stpaulsfallcreek.org
studio-gidoo.com
suitesolution.tv
surebets.online
testflight.live
thebenfitsexpert.com
tonyroberts.com.au
trackingdifference.com
vicidceleb.com
voipbrisbane.com.au
yt-thumbnail-download.online

Other certificates including the domain name stpaulsfallcreek.org

(limited to 100 certificates)
stpaulsfallcreek.org
stpaulsfallcreek.org
stpaulsfallcreek.org
stpaulsfallcreek.org
stpaulsfallcreek.org
stpaulsfallcreek.org
stpaulsfallcreek.org
stpaulsfallcreek.org
stpaulsfallcreek.org
stpaulsfallcreek.org
stpaulsfallcreek.org
stpaulsfallcreek.org
stpaulsfallcreek.org

Certificate

The complete raw certificate details for stpaulsfallcreek.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422955345409496580342304786713186259353097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 04:19:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 04:19:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stpaulsfallcreek.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781307618016446810433977698404162446686484548472662416670269749929015513993041328585873487683835773972171932023939190112401822133330026472697103852552692389945328954172913781951286005764728340573538861354395403372280145846313834382695274838802347938726257844025132658375863768546123916664651291261124902478124115897498966530962235159645016338405875648750322532465042359739088719725114554430674364454154020699140261687637344442625189169731967852367641197766831928573866685806588966066006427383007508770613495444515318930972002945187864028467455461143509943436168361177153974130944678360976372245510721417189863428301296785703511824475037632244148638156288317030848958801385596104752774653438862232765037861008648952608495547460795888109349616801365835251280671671309948419058149729963011864847612813241009381975065700430202222936743116229013117961543364083367428230565351446325458357854416914188856694537861092816138674379749125704139552458119008256827534932790066838350085829157077352573857306396995015069259854132965677634199464558577227097134282438679968734222593419141745662587687864999615185455406480374968560828880206206301166148532500981996652960392230873464728047559269430527990019997095636166843135552916797314246202877877367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4054ced6b1841e4aab377fae769760bd85866d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1848 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1219.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123upupup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albumdl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allenadmonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antgarner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anthropec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assistedtraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bastropisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beverify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobbyselectricalservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bullochnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chenangocountynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocamovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.covisualize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyebuydirecf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlsonswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glynnnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greekautoparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hackstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdmovi99.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heiner.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honeymoon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacksonautoinsurance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javtoful.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knucks-asianpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leecountygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.likedln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omingroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinotgris.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.predije.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preperrecon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.print.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quarterhoarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saslows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharonkwok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shelfsavvu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shwann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southcarolinareport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stpaulsfallcreek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studio-gidoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suitesolution.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surebets.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testflight.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebenfitsexpert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonyroberts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trackingdifference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vicidceleb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voipbrisbane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yt-thumbnail-download.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1219.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123upupup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albumdl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenadmonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antgarner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthropec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistedtraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bastropisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beverify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobbyselectricalservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullochnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chenangocountynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocamovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covisualize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyebuydirecf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlsonswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glynnnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greekautoparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdmovi99.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heiner.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeymoon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksonautoinsurance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javtoful.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knucks-asianpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leecountygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'likedln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omingroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinotgris.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predije.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preperrecon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quarterhoarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saslows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharonkwok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shelfsavvu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shwann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcarolinareport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulsfallcreek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio-gidoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitesolution.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surebets.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testflight.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebenfitsexpert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonyroberts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackingdifference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vicidceleb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voipbrisbane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yt-thumbnail-download.online'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d3f0ef77800000403004730450221009e6af87b870b7af9c6d03b8969fba9e228a9add2a8f804f28a151589e98057d80220031d29e49a90d9e22075a5a397f4296141dfcbd1763b423c34f20cdde3b5f51200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d3f0ef9760000040300473045022100fc8e06d01859a8d237ebe79be803cc1087baf2c3e114304dd9afb41d5392be02022043478a4e5d8dfc2531faa3892ed424aa05274fcf491a6c07b04f1cd050aab00d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a90165757b19dac3cc1adbdce682b13e839a1a6b7e0f9b816171ef2061113fb8fadb7cdce42cb91eb8845b153bd930e6b344fed119748985a623da17ee5020a044fd0480e9010adc665982191c079b90bfb07ca9ab5990dfdbd1e519af3ab4cbab9377d7fd1c682bcc5e384a73b0250a56118ed24381f324a4e2843055c831a53549fd86590c4f247659b257db01d947c76ab781546129590627f95135f89bb5f8904b25e9c151a8c9ad7c6e227a0e7a6cac86b914f1b6a42ddbf3eba11e1c17f8f31b1dd8dc47f390bf49f8cb0d38a9203d42bd5bd5363ca7445d87e0b19b4aa335d56771575d62ce42f9d085b5f05c7d350d881a8814bc37ffe443d47892e2