www.cgieffects.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7c:ca:b1:aa:73:46:dc:2d:86:2f:f3:32:b4:30:c1:99:db was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.cgieffects.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7c:ca:b1:aa:73:46:dc:2d:86:2f:f3:32:b4:30:c1:99:db
Serial Number (int): 303801297842312424519420959616783320455643
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:95:4d:ff:f2:03:14:fb:ab:c9:a4:de:c4:da:f5:65:c0:79:cb:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:c4:f7:7a:2b:72:bc:48:77:66:6e:b3:73:9d:57:3c:f7:ed:48:80
Fingerprint (sha256): e9:15:80:6b:a4:dc:f2:57:70:a0:9d:3e:c0:40:e9:47:8e:d0:ef:b1:87:94:92:7b:e9:ef:77:c8:d7:2d:18:6f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.cgieffects.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cgieffects.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dperformances.com
3dpolice.com
affocapital.com
affodigital.com
architectsworld.net
baliherbalist.org
blockchainacademi.com
blockchainag.net
blockchaingrowers.com
cartoonbusiness.com
countycricket.com
cricketheadlines.com
cryptoag.net
deutschelending.com
dominicaweather.com
dutch-dictionary.com
fijihistory.com
gabrielgarciamarquez.net
irishlending.com
lagrandemanipulation.net
lapenthouse.com
lawsucre.com
liaisonofficer.com
liberiamoney.com
listentowhistleblowers.com
malihello.com
netjobsworld.com
newoffshorelending.com
nigeriaassets.org
oshawareal.com
privatebankingworld.com
procurementbusiness.com
releasestrategy.com
romabudapest.com
sciencelending.com
selectedgroups.com
shanghailending.com
shaoxingtechnology.com
shipholding.com
sportovninoviny.com
sumofnumbers.com
totalisolation.net
unnouveau.com
wholesale-kingdom.com
writtenbelow.com
www.24costarica.com
www.3dpolice.com
www.affocapital.com
www.affodigital.com
www.architectsworld.net
www.athensattractions.com
www.blockchainacademi.com
www.blockchainag.net
www.cartoonbusiness.com
www.caymancryptoexchange.com
www.cgieffects.com
www.chineseafricandevfunds.com
www.cooptions.org
www.coralspringsweather.com
www.countycricket.com
www.dantedivinecomedy.com
www.deutschelending.com
www.dominicaweather.com
www.dutch-dictionary.com
www.equitysector.com
www.fijihistory.com
www.gabrielgarciamarquez.net
www.irelandmoney.com
www.irishlending.com
www.lagrandemanipulation.net
www.lapenthouse.com
www.lawcayenne.com
www.listentowhistleblowers.com
www.malihello.com
www.marineholdingtanks.com
www.motivationspeakers.org
www.newoffshorelending.com
www.oshawareal.com
www.pacificgeo.org
www.privatebankingworld.com
www.procurementbusiness.com
www.releasestrategy.com
www.royalbitcoinexchange.com
www.santafenewspaper.com
www.sciencelending.com
www.selectedgroups.com
www.seychellessport.com
www.shaoxingtechnology.com
www.sumofnumbers.com
www.totalisolation.net
www.worldweak.com
zaragozaweather.com

Other certificates including the domain name cgieffects.com

(limited to 100 certificates)
www.cashinvestigation.net
seawardcontacts.com
www.freeviewnews.com
opensourceimpacts.com
www.equitysector.com
www.stardustrevelation.net
www.commerceprojects.com
dubaibreakingnews.com
www.affocapital.com
www.biologiquedefinition.net
balletcardigan.com
balletcardigan.com
www.detroitacts.com
dubaigrowers.com
omahagrowers.com
www.lagrandemanipulation.net
www.amazingintuition.net
www.royalbitcoinexchange.com
www.motivationspeakers.org
www.underseaminingprojects.com
opensourceimpacts.com
3dperformances.com
selectedgroups.com
www.derivativescontracts.com
www.lapenthouse.com
balletcardigan.com
tampaprojects.com
www.balletandbaseball.com
www.beforelaunch.org
www.cgieffects.com
shanghailending.com
global-debt.com
selectedgroups.com
wildspeculation.net
www.marinesupport.org
3dperformances.com
www.tokyocontracts.com
www.santamonicaprojects.com
www.global-debt.com
jerseyfinance.net
alexvogel.org
www.detroitacts.com
www.malihello.com
www.detroitacts.com
www.unionacts.com
www.financeaviation.net
oilcontracts.com
bombayacts.com
www.marinecontracts.com
www.secretpatent.com
www.marinesupport.org
www.globalsolarinstallation.net
www.lapenthouse.com
listentowhistleblowers.com
www.commerceprojects.com
911demolition.net
onboardnavigation.net
colombiaprojects.com
www.internationalrecognition.net
wildspeculation.net
www.dubaibreakingnews.com
www.genesanddna.org
www.global-debt.com
shanghailending.com
www.procurementbusiness.com
environmentregulation.net
dubaibreakingnews.com
www.lapenthouse.com
www.commerceprojects.com
omahagrowers.com
dubaiflying.com
africaedition.net
www.phaseconjugation.net
www.procurementbusiness.com
www.cryptoag.net
www.shaleinvestigation.net
www.irelandmoney.com
philippinesgoldmines.com
cgieffects.com
architecturaldemolition.net
www.attracts.com
www.willcollect.com
wtcdemolition.net
www.financeaviation.net
www.toweringprojects.com
www.dubaiorganicgrowers.com
www.formingcontacts.com
writtenbelow.com
balletcardigan.com
3dperformances.com
www.detroitacts.com
alexvogel.org
deutschelending.com
erosionbreakwaters.org
www.commerceprojects.com
definerights.com
onlineassassination.com
www.marketintervention.net
abegoldstein.com
www.lapenthouse.com

Certificate

The complete raw certificate details for www.cgieffects.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2f3PiVkUA0EN4ONlLok
Wa58ztHQqqMVVDXeUPBp2bmcLP6ZArkgN08d9kraXzLW1iBZ5WGsV3DRoH0sgDw1
66A251fZGe48jwTcCYALfs8G0DdbRq6tL7qKx/fDq5d/k70ZNa0c9m2lwa0Ol8pI
UUPDiNdR1IODMhZSOJozo6una9z8c7PH5BHO4E+aLHc2X08MPGYoiIr2e7gp7L4m
e8D/niXBOeeoRQsWuy6G14tF6Fckb0JRK+PYiHgme6VyHcJyxJGXDZS8LKORryX9
8mEvVAkwyLjiVjZE57vlAM8Q90bSb8GmARlSe1NudChBEpuDP9Y4N0U/6ioHJ12z
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303801297842312424519420959616783320455643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 11:42:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 11:42:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cgieffects.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23657830471463584643242348398726423320798101843166880271002963284770112003840673406879081221714137463496271442229823122176518006868094151823901713599772130103093628117463802411705354966658534186439147728594282218083787799173299972290222862504855347156389536951429855887256577209822887903308693169177806333406571930538204253674729391139244969359120246816224809487754474495164319389354424388645552170527077301908733934641415502867931617579669449055879680496705447113715846525833480908175611785036186452161331988597132130053540898453106286221594637826078704954198259687034511085494378935738278955545628756058295293031349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95954dfff20314fbabc9a4dec4daf565c079cb27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2050 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dperformances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affocapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architectsworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baliherbalist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainacademi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchaingrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countycricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketheadlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptoag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominicaweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dutch-dictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fijihistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabrielgarciamarquez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irishlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagrandemanipulation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawsucre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liaisonofficer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberiamoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listentowhistleblowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malihello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netjobsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newoffshorelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriaassets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshawareal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankingworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procurementbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releasestrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romabudapest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selectedgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanghailending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaoxingtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportovninoviny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumofnumbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalisolation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unnouveau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale-kingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writtenbelow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.24costarica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affocapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.architectsworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athensattractions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainacademi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartoonbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caymancryptoexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgieffects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chineseafricandevfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooptions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coralspringsweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countycricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dantedivinecomedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dominicaweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dutch-dictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equitysector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fijihistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gabrielgarciamarquez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irelandmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irishlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagrandemanipulation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawcayenne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listentowhistleblowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malihello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marineholdingtanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motivationspeakers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newoffshorelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oshawareal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacificgeo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankingworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.procurementbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.releasestrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalbitcoinexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santafenewspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sciencelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selectedgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seychellessport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaoxingtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumofnumbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totalisolation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldweak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaragozaweather.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e4748a92500000403004830460221008956e09717dd29ab5add9689202d2e33c708d01cda17ba4c6d03b49a7b1548be0221008018b8a49fff69319b72bc6264df12683554b728ace9de41d90b5863b24291cf007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e4748a951000004030047304502206c8eb42fdaf50d48500b7480eade3e59e5898bcee35edd32e3d619b59ecf5900022100de2d67a27f7b37d36a7e2b2231f820e3256c82de34b8a628e9a1a602bb789bda
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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