mygrinder.ca

Issued by R10

About this certificate

This digital certificate with serial number 04:12:32:0c:be:61:ac:53:b3:26:df:00:f1:aa:d0:b0:4e:06 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mygrinder.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:12:32:0c:be:61:ac:53:b3:26:df:00:f1:aa:d0:b0:4e:06
Serial Number (int): 354640753900365716206667040143119976779270
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a5:31:6b:49:87:48:b4:ed:2a:e0:c5:ef:f0:41:5a:42:94:35:e8:9b
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 14:9c:b6:31:18:51:24:3d:7a:d0:1b:4c:70:6c:b8:3c:55:b1:22:14
Fingerprint (sha256): f7:3c:17:b4:8c:06:c2:92:21:d8:9c:fb:3a:6e:94:93:2b:9f:dd:fb:90:b7:70:17:e7:3e:ee:62:91:91:53:bb

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate mygrinder.ca

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mygrinder.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

50staterunningclub.com
aiheidi.com
alabamacourts.com
alfds.org
allianceibm.org
allureglow.com
arbitragekings.com
aussiebattler.info
balanceteacher.com
banya.in
basedmedia.co
bestofanything.com
bokelman.com
buysoils.com
buzzank.com
cannabisstocktrade.com
ccdastronomy.com
channelsheetmetal.com
churchgreat.com
churchoffitness.com
cloudbaker.com
cluttermasters.com
conserve-a-tree.com
consultpaul.com
costaricaecotravel.com
designtorecycle.com
dhk.co.in
doctorstellamd.com
easttexaswoman.com
easybot.in
effectiveracism.com
encuentrosexo.com
faphousesubs2.bdsmsecurity.com
firstbornsaints.co
fwelders.org
gamcasino.co.uk
gayworldtv.com
harleystreet-facelift.com
homesausagemakers.com
homeschoolinteriordesign.org
irishbartours.com
jenkinscounty.com
jobsluk.com
joysofgardening.com
jwcarpentryandhomeservices.com
khm.co.in
kossuthcounty.com
lawbyzipcode.com
leaselock.info
letsrxroarin24.com
losaccionistas.com
lostpeoplemattermost.com
medvic.com
moffatcounty.com
mosaicwr.com
mygrinder.ca
mzj.co.in
namesnagger.com
nationalparks.info
newzealandpropolis.com
ononcotton.com
ostomyequipment.com
peasanthillgrain.com
percussionexcerpts.org
performancecapturestudios.com
picare.co
pillsorter.com
pitbullpatriot.com
planpub.com
poconodiner.com
propertyprague.com
quaycounty.com
ramseydetailing.com
rencontrelyon.fr
returningthediamonds.org
revrichardchandlerdeland.com
riversidemedicalcenter.com
rxsugarbiotics.com
rxsugarvanillabitez.com
showagency.com
soccercoach.in
stevensvilledumpster.com
sundaycruise.com
sunseekerdoors.com
tarotx.com
templar.vc
tentaclesex.com
trammelllaw.com
uburbia.com
wascocounty.com
weathersupercenter.com
westendcbd.com
westtexashistoricalassociation.org
wishingwater.com
wizzbangsblog.com
woodwindexcerpts.org
www.freebit.co.in
yazoocounty.com
zenmenu.com

Other certificates including the domain name mygrinder.ca

(limited to 100 certificates)
mygrinder.ca
mygrinder.ca
mygrinder.ca
mygrinder.ca
mygrinder.ca
nationalhealthyhomebuildersassociation.com.mygrinder.ca
herzpta.com.mygrinder.ca
mygrinder.ca
mygrinder.ca
mygrinder.ca
mygrinder.ca
www.mygrinder.ca
mygrinder.ca
mygrinder.ca

Certificate

The complete raw certificate details for mygrinder.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WSU61wTTUSeXe2DFw9v
YRuvRnPZqmAR0cd9GomYM5dzNa4X1bn3GzafHw5ZZnK0e85jWWxawAp+QKTtAyqp
Rb2rEB+0XU/L1BxWyioTJjqkQ6zJ5aSPKEzF+4nB8bQFnnNKCslH/c4TSR5+pWy4
EvAR41dfcIWmHLMr47RpHLxqaZxWoKhkBwpEDqswzxe5cGDJ6RFMbQXshGuO1qbR
Dr2L8wp6m63+ExnmBnzQOgCUQSG/TMJk4iDDWlah8xtOtf0egZUVITXa/r4U5yY0
5QGIpWU9GDYoVaLYxgfk+gvJfrGX3aiRPOCQofN341F9DJafcbUmI4xdDCYwDEuZ
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354640753900365716206667040143119976779270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 09:25:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 09:25:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mygrinder.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26433404430784132014125606028822415250024045442038819586824823533119265247812402131480922206008238183337719394393768803137075507486428583805365138064059155253734626138366738412091055302740559006438476622843355555411215305265716899629058873165318405294463960284665047736184840378583204652128307688653347932931512103765714844186326398858952991837819871349601287707822455414849298663609240691088384998343378390515948913953617610582221471819148966138553511710252841624335054420513685244063117604713027285587943949573623098443131141354312948426595245120559422695077431419638975614767312468732903897494120860140900576893193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5316b498748b4ed2ae0c5eff0415a429435e89b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1881 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50staterunningclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiheidi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamacourts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianceibm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allureglow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragekings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aussiebattler.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balanceteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banya.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basedmedia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestofanything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bokelman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysoils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisstocktrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccdastronomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channelsheetmetal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchgreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchoffitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudbaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluttermasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conserve-a-tree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costaricaecotravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designtorecycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhk.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorstellamd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easttexaswoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easybot.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'effectiveracism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encuentrosexo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faphousesubs2.bdsmsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstbornsaints.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwelders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamcasino.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayworldtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harleystreet-facelift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesausagemakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolinteriordesign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irishbartours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkinscounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsluk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joysofgardening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwcarpentryandhomeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khm.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kossuthcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawbyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaselock.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsrxroarin24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losaccionistas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostpeoplemattermost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medvic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moffatcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosaicwr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygrinder.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namesnagger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalparks.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealandpropolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ononcotton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostomyequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peasanthillgrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'percussionexcerpts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performancecapturestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picare.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pillsorter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitbullpatriot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poconodiner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertyprague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quaycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramseydetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontrelyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returningthediamonds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revrichardchandlerdeland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riversidemedicalcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarbiotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarvanillabitez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccercoach.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevensvilledumpster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sundaycruise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunseekerdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templar.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tentaclesex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trammelllaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uburbia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wascocounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weathersupercenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westendcbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westtexashistoricalassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wishingwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizzbangsblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodwindexcerpts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freebit.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yazoocounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenmenu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff761c07a0000040300473045022100978fc658740e8634922fc5326074b644dbe54687d727f9b1250b710271ee658e02200a89609b4c939117f9c7509f89a7374abdbe8ec20d81c133d168e35bba64cfcd007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ff761c13e000004030046304402200649b568dee862ede442185f49e976b26dd61f5e429aa3a165e0e7020375056902203d856892c7a35bc18268538313c750dfa85959461727513cf4b4029d3c650a9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0048cfb81bb1a4ecff2861aed02dd39221823e138e4d697fa0f721ccbb5a5b685240d3afd960879419a54e63ac5bb617c60eb75ecb6fa671c8dbb76e6bdab7018c69152e08735b538315561aed0e6acb28742d8cef93d7fff38b4874631fe6ba0f6538d9552016af3d7736cb5f52e35dcdcb58ee2a9cabf56032cd98d941d515b55f7a72fbfaf46508c7045f77fecc4a0e48265f23acbe2a77d1e78efa96b7ad3cef3d295b868333c6381cb04897cac828cb8032b5f51cc21da8fb9e439e1deda58315178a2dc2d7dd30b17c7212dba3070ae90fa62f665684d68ca69b8f8502e955738cb4a7122a199a8a903efed4282958de2599399fc51942ec9606fd5b9abc