mineralindependence.ca
Issued by R11
About this certificate
This digital certificate with serial number 04:0b:aa:f8:4f:73:b0:40:81:6c:97:f9:7e:81:bc:f2:ae:df was issued on by Let's Encrypt.
With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=mineralindependence.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:0b:aa:f8:4f:73:b0:40:81:6c:97:f9:7e:81:bc:f2:ae:dfSerial Number (int): 352419507823551806742030091411880030678751
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 97:c5:c3:e0:de:4d:1d:90:a5:94:ee:83:e0:cb:8c:cf:5c:1f:20:09
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9
Fingerprint (sha1): cc:4b:f6:87:a0:93:a9:77:0b:6d:38:2f:9c:fb:f8:a3:e0:5a:de:0c
Fingerprint (sha256): f2:67:c5:e0:a9:df:27:68:a4:98:9f:d1:4c:ab:e2:35:b4:62:c2:ac:37:4f:e9:1d:20:de:92:95:8d:b8:9a:9c
Issuing Certificate URL: http://r11.i.lencr.org/
Revocation information
OCSP Server: http://r11.o.lencr.orgCheck the revocation status for certificate mineralindependence.ca
74
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mineralindependence.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
171baycolonydrive.com
alabamacourts.com
amritsardental.in
annemarie145.net
antra.in
atlanticsounds.net
beltramicounty.com
best-bathrooms.com.au
cattling.com
cbsd411.org
checkmyblock.com.au
cheetahdevelopment.com
chocolatereimagined.com
christkeystonechurch.net
cityofdecatur.com
clayclarkstowergardens.biz
comsysdes.net
cortlandco.us
ctrlpew.net
demitrisfeast.com.au
discover-ecuador.com
fabulosocasa.net
faithbaptistog.org
fantasycostume.net
faphousesubs4.bdsmsecurity.com
faviconimagemaker.com
fb.xinhxinh.xyz
foreigndivorce.com
foundationsacademy.com
greatchic.net
greenlionwoodworking.com
hazkem.com
hemppayroll.com
howtoremoveenglishivy.net
indianhistory.com
internationalhomeschoolday.org
jobluk.com
jobluk.net
joelrunyon.tv
kunming.biz
kycalls.statenationals.us
leocadio.org
lifesitenews.net
liquidproductions.me
mdmeetings.statenationals.us
meowpanties.com
miamicosmetics.net
mineralindependence.ca
nat.ms
nutuk.com
perteller.net
philadelphiaprivateinvestigator.org
psiloism.com
rencontremontpellier.fr
resetivclinic.co
rfidscanners.com
rplayer.co.za
rxsatiety.com
sacampguide.com
schnelllaw.com
seiterre.org
smartpad.shop
stefanhaney.com
surnamesbytown.com
swealthyissweetandhealthy.com
theanti-sugar.com
thenewjerseyassembly.net
towerofbabel.ca
vatanpartisi.com
visitthegreatbarrierreef.com
wellnessconnexion.us
www.highscale.co.nz
www.pearsonjmj.com
xn--p-1ga.at
alabamacourts.com
amritsardental.in
annemarie145.net
antra.in
atlanticsounds.net
beltramicounty.com
best-bathrooms.com.au
cattling.com
cbsd411.org
checkmyblock.com.au
cheetahdevelopment.com
chocolatereimagined.com
christkeystonechurch.net
cityofdecatur.com
clayclarkstowergardens.biz
comsysdes.net
cortlandco.us
ctrlpew.net
demitrisfeast.com.au
discover-ecuador.com
fabulosocasa.net
faithbaptistog.org
fantasycostume.net
faphousesubs4.bdsmsecurity.com
faviconimagemaker.com
fb.xinhxinh.xyz
foreigndivorce.com
foundationsacademy.com
greatchic.net
greenlionwoodworking.com
hazkem.com
hemppayroll.com
howtoremoveenglishivy.net
indianhistory.com
internationalhomeschoolday.org
jobluk.com
jobluk.net
joelrunyon.tv
kunming.biz
kycalls.statenationals.us
leocadio.org
lifesitenews.net
liquidproductions.me
mdmeetings.statenationals.us
meowpanties.com
miamicosmetics.net
mineralindependence.ca
nat.ms
nutuk.com
perteller.net
philadelphiaprivateinvestigator.org
psiloism.com
rencontremontpellier.fr
resetivclinic.co
rfidscanners.com
rplayer.co.za
rxsatiety.com
sacampguide.com
schnelllaw.com
seiterre.org
smartpad.shop
stefanhaney.com
surnamesbytown.com
swealthyissweetandhealthy.com
theanti-sugar.com
thenewjerseyassembly.net
towerofbabel.ca
vatanpartisi.com
visitthegreatbarrierreef.com
wellnessconnexion.us
www.highscale.co.nz
www.pearsonjmj.com
xn--p-1ga.at
Other certificates including the domain name mineralindependence.ca
(limited to 100 certificates)
Certificate
The complete raw certificate details for mineralindependence.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKkjCCCXqgAwIBAgISBAuq+E9zsECBbJf5foG88q7fMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTEwHhcNMjQwNjI2MTIwNTA0WhcNMjQwOTI0MTIwNTAzWjAhMR8wHQYDVQQD ExZtaW5lcmFsaW5kZXBlbmRlbmNlLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAnl0tq6VBSUpZOr5+8jL0Dgz+9Fta14gragmUpXmOifoDtPHRg0Bh n8cciunhBbeCIfwgvAjPYBQcPP1Grg4iVkADgq+VLQPKwL9AdiQeDGkrvxtknsqo 5WvRJKBj1eGQRr80y/wx/EN4bBSmDZs0sMaoZ7mgBq3RzX0QpJzMzIAceeR07qqX kVtVS1dTV/FsXt8NRt9ca/ZTcq1ODQ4X6S+QI0n2ArbWYvB0527nU4tMidlL9rrR SBjcyDmsLjQfiHZHCW6qMVa5/RC8jb138H8XHVOL6Txa7XbolILhY0uTpga83Wk5 /5vEsb626VAoyapUenmF21kGeq9nVtEXqQIDAQABo4IHsDCCB6wwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBSXxcPg3k0dkKWU7oPgy4zPXB8gCTAfBgNVHSMEGDAWgBTF z0ak6vTDwHpslcQtsF6SLybjuTBXBggrBgEFBQcBAQRLMEkwIgYIKwYBBQUHMAGG Fmh0dHA6Ly9yMTEuby5sZW5jci5vcmcwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTEu aS5sZW5jci5vcmcvMIIFtQYDVR0RBIIFrDCCBaiCFTE3MWJheWNvbG9ueWRyaXZl LmNvbYIRYWxhYmFtYWNvdXJ0cy5jb22CEWFtcml0c2FyZGVudGFsLmlughBhbm5l bWFyaWUxNDUubmV0gghhbnRyYS5pboISYXRsYW50aWNzb3VuZHMubmV0ghJiZWx0 cmFtaWNvdW50eS5jb22CFWJlc3QtYmF0aHJvb21zLmNvbS5hdYIMY2F0dGxpbmcu Y29tggtjYnNkNDExLm9yZ4ITY2hlY2tteWJsb2NrLmNvbS5hdYIWY2hlZXRhaGRl dmVsb3BtZW50LmNvbYIXY2hvY29sYXRlcmVpbWFnaW5lZC5jb22CGGNocmlzdGtl eXN0b25lY2h1cmNoLm5ldIIRY2l0eW9mZGVjYXR1ci5jb22CGmNsYXljbGFya3N0 b3dlcmdhcmRlbnMuYml6gg1jb21zeXNkZXMubmV0gg1jb3J0bGFuZGNvLnVzggtj dHJscGV3Lm5ldIIUZGVtaXRyaXNmZWFzdC5jb20uYXWCFGRpc2NvdmVyLWVjdWFk b3IuY29tghBmYWJ1bG9zb2Nhc2EubmV0ghJmYWl0aGJhcHRpc3RvZy5vcmeCEmZh bnRhc3ljb3N0dW1lLm5ldIIeZmFwaG91c2VzdWJzNC5iZHNtc2VjdXJpdHkuY29t ghVmYXZpY29uaW1hZ2VtYWtlci5jb22CD2ZiLnhpbmh4aW5oLnh5eoISZm9yZWln bmRpdm9yY2UuY29tghZmb3VuZGF0aW9uc2FjYWRlbXkuY29tgg1ncmVhdGNoaWMu bmV0ghhncmVlbmxpb253b29kd29ya2luZy5jb22CCmhhemtlbS5jb22CD2hlbXBw YXlyb2xsLmNvbYIZaG93dG9yZW1vdmVlbmdsaXNoaXZ5Lm5ldIIRaW5kaWFuaGlz dG9yeS5jb22CHmludGVybmF0aW9uYWxob21lc2Nob29sZGF5Lm9yZ4IKam9ibHVr LmNvbYIKam9ibHVrLm5ldIINam9lbHJ1bnlvbi50doILa3VubWluZy5iaXqCGWt5 Y2FsbHMuc3RhdGVuYXRpb25hbHMudXOCDGxlb2NhZGlvLm9yZ4IQbGlmZXNpdGVu ZXdzLm5ldIIUbGlxdWlkcHJvZHVjdGlvbnMubWWCHG1kbWVldGluZ3Muc3RhdGVu YXRpb25hbHMudXOCD21lb3dwYW50aWVzLmNvbYISbWlhbWljb3NtZXRpY3MubmV0 ghZtaW5lcmFsaW5kZXBlbmRlbmNlLmNhggZuYXQubXOCCW51dHVrLmNvbYINcGVy dGVsbGVyLm5ldIIjcGhpbGFkZWxwaGlhcHJpdmF0ZWludmVzdGlnYXRvci5vcmeC DHBzaWxvaXNtLmNvbYIXcmVuY29udHJlbW9udHBlbGxpZXIuZnKCEHJlc2V0aXZj bGluaWMuY2+CEHJmaWRzY2FubmVycy5jb22CDXJwbGF5ZXIuY28uemGCDXJ4c2F0 aWV0eS5jb22CD3NhY2FtcGd1aWRlLmNvbYIOc2NobmVsbGxhdy5jb22CDHNlaXRl cnJlLm9yZ4INc21hcnRwYWQuc2hvcIIPc3RlZmFuaGFuZXkuY29tghJzdXJuYW1l c2J5dG93bi5jb22CHXN3ZWFsdGh5aXNzd2VldGFuZGhlYWx0aHkuY29tghF0aGVh bnRpLXN1Z2FyLmNvbYIYdGhlbmV3amVyc2V5YXNzZW1ibHkubmV0gg90b3dlcm9m YmFiZWwuY2GCEHZhdGFucGFydGlzaS5jb22CHHZpc2l0dGhlZ3JlYXRiYXJyaWVy cmVlZi5jb22CFHdlbGxuZXNzY29ubmV4aW9uLnVzghN3d3cuaGlnaHNjYWxlLmNv Lm56ghJ3d3cucGVhcnNvbmptai5jb22CDHhuLS1wLTFnYS5hdDATBgNVHSAEDDAK MAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AD8XS0/XIkdYlB1l HIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABkFSmVI4AAAQDAEYwRAIgQDauSuqTwjjM Iiv6RYoe92D4iYCMZGVjHrbR1Hd73QkCIDjn7/DJCGcQwUvs8PrquUmWBMkxiCIK eAxDDB3gKxvJAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGQ VKZU1QAABAMASDBGAiEA7zirVvJwvasne1z9vJ63gIKpidxy9L688f7mIfeIlZ4C IQCQOVWoHqIY6SIaqcTVNUn+VwljlCbZ+zqzS1MzWn7CZzANBgkqhkiG9w0BAQsF AAOCAQEAKM5fN0tZG70IoNnjaYQUzYYEHHZDIqFoRPkkQCSB/QbRo/n34uQisC5g HyR0BRgMaVMa97Xk521WwtfJgIV3cvz417D4oS6hauiQ/rXnrlR88+9lR1ZwOUMz SlVwiJfDG6MUkwrpMp1MsAQ2oj7ez9xhtCeQO17knfJCPc6jrWAdk7VLyoyMzZLh dUFlkSEyskyOG7WvZysQVIb7v+v7VsqKv6Vsh901Jv2SVs0pImgiU/sTXvneHDz+ kQCoDJ1B/oI0xVWwz/G+f00MAhwV//y+iQl2ruilEGGLF70u1h63ViVohPJsXsDo l9ApwY4VdPzpQGbZpO2w2ZtO7QQRQA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl0tq6VBSUpZOr5+8jL0 Dgz+9Fta14gragmUpXmOifoDtPHRg0Bhn8cciunhBbeCIfwgvAjPYBQcPP1Grg4i VkADgq+VLQPKwL9AdiQeDGkrvxtknsqo5WvRJKBj1eGQRr80y/wx/EN4bBSmDZs0 sMaoZ7mgBq3RzX0QpJzMzIAceeR07qqXkVtVS1dTV/FsXt8NRt9ca/ZTcq1ODQ4X 6S+QI0n2ArbWYvB0527nU4tMidlL9rrRSBjcyDmsLjQfiHZHCW6qMVa5/RC8jb13 8H8XHVOL6Txa7XbolILhY0uTpga83Wk5/5vEsb626VAoyapUenmF21kGeq9nVtEX qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 352419507823551806742030091411880030678751 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 12:05:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 12:05:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mineralindependence.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19991600166356006385057732346680925757483966124879423626922301323906495659496342971539570218247354749788290707567985758984763186101109723081071644722110837177869031226718472967053938429770701849003177400060341354695620966503101479351597330578927353219403005221889324419886906721582354773395996139960673237646537490481222846300358809090451263801776562460782589149682322560650712859668129872613199206568128736190745932973063533407029351511716019619605916391324553859210730867375093775043491480290192259705875376409015023675763327527640899607934243500695163139160877852242326926388498033449410066911105403954529586714537 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 97c5c3e0de4d1d90a594ee83e0cb8ccf5c1f2009 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1452 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '171baycolonydrive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamacourts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amritsardental.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annemarie145.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antra.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticsounds.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beltramicounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'best-bathrooms.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cattling.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbsd411.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmyblock.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheetahdevelopment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocolatereimagined.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christkeystonechurch.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofdecatur.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clayclarkstowergardens.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comsysdes.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortlandco.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrlpew.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demitrisfeast.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover-ecuador.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabulosocasa.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithbaptistog.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasycostume.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faphousesubs4.bdsmsecurity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faviconimagemaker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.xinhxinh.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreigndivorce.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationsacademy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatchic.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlionwoodworking.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazkem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemppayroll.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtoremoveenglishivy.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianhistory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalhomeschoolday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobluk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobluk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joelrunyon.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunming.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kycalls.statenationals.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leocadio.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifesitenews.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidproductions.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdmeetings.statenationals.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meowpanties.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miamicosmetics.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralindependence.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nat.ms' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutuk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perteller.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philadelphiaprivateinvestigator.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psiloism.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontremontpellier.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resetivclinic.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfidscanners.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rplayer.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsatiety.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacampguide.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schnelllaw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seiterre.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartpad.shop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefanhaney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surnamesbytown.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swealthyissweetandhealthy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theanti-sugar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenewjerseyassembly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'towerofbabel.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vatanpartisi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitthegreatbarrierreef.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellnessconnexion.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highscale.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearsonjmj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--p-1ga.at' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000019054a6548e000004030046304402204036ae4aea93c238cc222bfa458a1ef760f889808c6465631eb6d1d4777bdd09022038e7eff0c9086710c14becf0faeab9499604c93188220a780c430c1de02b1bc900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000019054a654d50000040300483046022100ef38ab56f270bdab277b5cfdbc9eb78082a989dc72f4bebcf1fee621f788959e022100903955a81ea218e9221aa9c4d53549fe5709639426d9fb3ab34b53335a7ec267 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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