The Perl Toolchain Summit needs more sponsors. If your company depends on Perl, please support this very important event.
Changes 028
MANIFEST 21
META.json 540
META.yml 2424
Makefile.PL 12
lib/IO/Socket/SSL/PublicSuffix.pm 6691305
lib/IO/Socket/SSL/Utils.pm 14
lib/IO/Socket/SSL.pm 1023
lib/IO/Socket/SSL.pod 1320
t/auto_verify_hostname.t 51
t/cert_formats.t 31
t/cert_no_file.t 51
t/compatibility.t 71
t/connectSSL-timeout.t 10
t/core.t 61
t/dhe.t 61
t/ecdhe.t 51
t/external/ocsp.t 22
t/external/usable_ca.t 77
t/io-socket-inet6.t 51
t/io-socket-ip.t 61
t/memleak_bad_handshake.t 01
t/mitm.t 51
t/nonblock.t 65
t/npn.t 51
t/plain_upgrade_downgrade.t 41
t/public_suffix_ssl.t 43
t/readline.t 51
t/sessions.t 81
t/signal-readline.t 51
t/sni.t 51
t/sni_verify.t 51
t/start-stopssl.t 51
t/startssl-failed.t 51
t/startssl.t 41
t/sysread_write.t 51
t/testlib.pl 15
t/verify_fingerprint.t 21
t/verify_hostname.t 51
util/analyze-ssl.pl 2853
40 files changed (This is a version diff) 9391506
@@ -1,3 +1,31 @@
+2.002 2014/10/21
+- fix check for (invalid) IPv4 when validating hostname against certificate. Do
+  not use inet_aton any longer because it can cause DNS lookups for malformed
+  IP. RT#99448, thanks to justincase[AT]yopmail[DOT]com.
+- Update PublicSuffix with latest version from publicsuffix.org - lots of new
+  top level domains.
+- Add exception to PublicSuffix for s3.amazonaws.com - RT#99702, thanks to
+  cpan[AT]cpanel[DOT]net.
+2.001 2014/10/21
+- Add SSL_OP_SINGLE_(DH|ECDH)_USE to default options to increase PFS security.
+  Thanks to Heikki Vatiainen for suggesting.
+- Update external tests with currently expected fingerprints of hosts.
+- Some fixes to make it still work on 5.8.1.
+2.000 2014/10/15
+- consider SSL3.0 as broken because of POODLE and disable it by default.
+- Skip live tests without asking if environment NO_NETWORK_TESTING is set.
+  Thanks to ntyni[AT]debian[DOT]org for suggestion.
+- skip tests which require fork on non-default windows setups without proper
+  fork. Thanks to SHAY for https://github.com/noxxi/p5-io-socket-ssl/pull/18
+1.999 2014/10/09
+- make sure we don't use version 0.30 of IO::Socket::IP
+- make sure that PeerHost is checked on all places where PeerAddr is
+  checked, because these are synonyms and IO::Socket::IP prefers PeerHost
+  while others prefer PeerAddr. Also accept PeerService additionally to
+  PeerPort.
+  See https://github.com/noxxi/p5-io-socket-ssl/issues/16 for details.
+- add ability to use client certificates and to overwrite hostname with
+  util/analyze-ssl.pl.
 1.998 2014/09/07
 - make client authentication work at the server side when SNI is in by use
   having CA path and other settings in all SSL contexts instead of only the main
@@ -69,5 +69,4 @@ t/verify_fingerprint.t
 t/verify_hostname_standalone.t
 t/verify_hostname.t
 util/analyze-ssl.pl
-META.yml                                 Module YAML meta-data (added by MakeMaker)
-META.json                                Module JSON meta-data (added by MakeMaker)
+META.yml                                 Module meta-data (added by MakeMaker)
@@ -1,54 +0,0 @@
-{
-   "abstract" : "Nearly transparent SSL encapsulation for IO::Socket::INET.",
-   "author" : [
-      "Steffen Ullrich <sullr@cpan.org>, Peter Behroozi, Marko Asplund"
-   ],
-   "dynamic_config" : 1,
-   "generated_by" : "ExtUtils::MakeMaker version 6.98, CPAN::Meta::Converter version 2.120630",
-   "license" : [
-      "perl_5"
-   ],
-   "meta-spec" : {
-      "url" : "http://search.cpan.org/perldoc?CPAN::Meta::Spec",
-      "version" : "2"
-   },
-   "name" : "IO-Socket-SSL",
-   "no_index" : {
-      "directory" : [
-         "t",
-         "inc"
-      ]
-   },
-   "prereqs" : {
-      "build" : {
-         "requires" : {
-            "ExtUtils::MakeMaker" : "0"
-         }
-      },
-      "configure" : {
-         "requires" : {
-            "ExtUtils::MakeMaker" : "0"
-         }
-      },
-      "runtime" : {
-         "requires" : {
-            "Net::SSLeay" : "1.46",
-            "Scalar::Util" : "0"
-         }
-      }
-   },
-   "release_status" : "stable",
-   "resources" : {
-      "bugtracker" : {
-         "web" : "https://rt.cpan.org/Dist/Display.html?Queue=IO-Socket-SSL"
-      },
-      "homepage" : "https://github.com/noxxi/p5-io-socket-ssl",
-      "license" : [
-         "http://dev.perl.org/licenses/"
-      ],
-      "repository" : {
-         "url" : "https://github.com/noxxi/p5-io-socket-ssl"
-      }
-   },
-   "version" : "1.998"
-}
@@ -1,28 +1,28 @@
----
-abstract: 'Nearly transparent SSL encapsulation for IO::Socket::INET.'
+--- #YAML:1.0
+name:               IO-Socket-SSL
+version:            2.002
+abstract:           Nearly transparent SSL encapsulation for IO::Socket::INET.
 author:
-  - 'Steffen Ullrich <sullr@cpan.org>, Peter Behroozi, Marko Asplund'
-build_requires:
-  ExtUtils::MakeMaker: '0'
+    - Steffen Ullrich <sullr@cpan.org>, Peter Behroozi, Marko Asplund
+license:            perl
+distribution_type:  module
 configure_requires:
-  ExtUtils::MakeMaker: '0'
-dynamic_config: 1
-generated_by: 'ExtUtils::MakeMaker version 6.98, CPAN::Meta::Converter version 2.120630'
-license: perl
-meta-spec:
-  url: http://module-build.sourceforge.net/META-spec-v1.4.html
-  version: '1.4'
-name: IO-Socket-SSL
-no_index:
-  directory:
-    - t
-    - inc
+    ExtUtils::MakeMaker:  0
+build_requires:
+    ExtUtils::MakeMaker:  0
 requires:
-  Net::SSLeay: '1.46'
-  Scalar::Util: '0'
+    Net::SSLeay:   1.46
+    Scalar::Util:  0
 resources:
-  bugtracker: https://rt.cpan.org/Dist/Display.html?Queue=IO-Socket-SSL
-  homepage: https://github.com/noxxi/p5-io-socket-ssl
-  license: http://dev.perl.org/licenses/
-  repository: https://github.com/noxxi/p5-io-socket-ssl
-version: '1.998'
+    bugtracker:  https://rt.cpan.org/Dist/Display.html?Queue=IO-Socket-SSL
+    homepage:    https://github.com/noxxi/p5-io-socket-ssl
+    license:     http://dev.perl.org/licenses/
+    repository:  https://github.com/noxxi/p5-io-socket-ssl
+no_index:
+    directory:
+        - t
+        - inc
+generated_by:       ExtUtils::MakeMaker version 6.57_05
+meta-spec:
+    url:      http://module-build.sourceforge.net/META-spec-v1.4.html
+    version:  1.4
@@ -108,7 +108,8 @@ my %usable_ca;
     }
 }
 
-my $xt = prompt( "Should I do external tests?\n".
+my $xt = $ENV{NO_NETWORK_TESTING} && 'n';
+$xt ||= prompt( "Should I do external tests?\n".
     "These test will detect if there are network problems and fail soft,\n".
     "so please disable them only if you definitely don't want to have any\n".
     "network traffic to external sites.   ".
@@ -179,6 +179,7 @@ sub from_file {
 	die "failed to open $file: $!";
     }
     my %tree;
+    local $/ = "\n";
     while ( my $line = <$fh>) {
 	$line =~s{//.*}{};
 	$line =~s{\s+$}{};
@@ -220,10 +221,10 @@ sub public_suffix {
     @$name or return;
     $_ = lc($_) for(@$name);
 
-    my (%wild,%host,%xcept,@stack);
+    my (%wild,%host,%xcept,@stack,$choices);
     my $p = $self->{tree};
     for( my $i=0; $i<@$name; $i++ ) {
-	my $choices = [];
+	$choices = [];
 	if ( my $px = $p->{ $name->[$#$name-$i] } ) {
 	    # name match, continue with next path element
 	    push @$choices,$px;
@@ -293,7 +294,8 @@ sub public_suffix {
 	if ( ! defined $data ) {
 	    $data = do { local $/; <DATA> };
 	    # known exceptions of behavior of SSL certificates from PSL
-	    $data .= "!googleapis.com";
+	    $data .= "!googleapis.com\n";
+	    $data .= "!s3.amazonaws.com\n"; # RT#99702
 
 	}
 	return $data;
@@ -306,6 +308,7 @@ sub update_self_from_url {
     -w $dst or die "cannot write $dst";
     open( my $fh,'<',$dst ) or die "open $dst: $!";
     my $code = '';
+    local $/ = "\n";
     while (<$fh>) {
 	$code .= $_;
 	$code =~m{\A__DATA__\r?\n\Z} and last;
@@ -521,6 +524,7 @@ ar
 com.ar
 edu.ar
 gob.ar
+gov.ar
 int.ar
 mil.ar
 net.ar
@@ -563,7 +567,6 @@ edu.au
 gov.au
 asn.au
 id.au
-csiro.au
 // Historic 2LDs (closed to new registration, but sites still exist)
 info.au
 conf.au
@@ -586,7 +589,7 @@ sa.edu.au
 tas.edu.au
 vic.edu.au
 wa.edu.au
-act.gov.au
+// act.gov.au  Bug 984824 - Removed at request of Greg Tankard
 // nsw.gov.au  Bug 547985 - Removed at request of <Shae.Donelan@services.nsw.gov.au>
 // nt.gov.au  Bug 940478 - Removed at request of Greg Connors <Greg.Connors@nt.gov.au>
 qld.gov.au
@@ -633,6 +636,7 @@ rs.ba
 // bb : http://en.wikipedia.org/wiki/.bb
 bb
 biz.bb
+co.bb
 com.bb
 edu.bb
 gov.bb
@@ -640,6 +644,7 @@ info.bb
 net.bb
 org.bb
 store.bb
+tv.bb
 
 // bd : http://en.wikipedia.org/wiki/.bd
 *.bd
@@ -743,7 +748,7 @@ mil.bo
 tv.bo
 
 // br : http://registro.br/dominio/categoria.html
-// Submitted by registry <fneves@registro.br> 2014-03-04
+// Submitted by registry <fneves@registro.br> 2014-08-11
 br
 adm.br
 adv.br
@@ -791,7 +796,7 @@ mil.br
 mp.br
 mus.br
 net.br
-nom.br
+*.nom.br
 not.br
 ntr.br
 odo.br
@@ -937,9 +942,12 @@ gob.cl
 co.cl
 mil.cl
 
-// cm : http://en.wikipedia.org/wiki/.cm
+// cm : http://en.wikipedia.org/wiki/.cm plus bug 981927
 cm
+co.cm
+com.cm
 gov.cm
+net.cm
 
 // cn : http://en.wikipedia.org/wiki/.cn
 // Submitted by registry <tanyaling@cnnic.cn> 2008-06-11
@@ -1154,7 +1162,14 @@ gob.es
 edu.es
 
 // et : http://en.wikipedia.org/wiki/.et
-*.et
+et
+com.et
+gov.et
+org.et
+edu.et
+biz.et
+name.et
+info.et
 
 // eu : http://en.wikipedia.org/wiki/.eu
 eu
@@ -5487,7 +5502,24 @@ com.nr
 nu
 
 // nz : http://en.wikipedia.org/wiki/.nz
-*.nz
+// Confirmed by registry <jay@nzrs.net.nz> 2014-05-19
+nz
+ac.nz
+co.nz
+cri.nz
+geek.nz
+gen.nz
+govt.nz
+health.nz
+iwi.nz
+kiwi.nz
+maori.nz
+mil.nz
+xn--mori-qsa.nz
+net.nz
+org.nz
+parliament.nz
+school.nz
 
 // om : http://en.wikipedia.org/wiki/.om
 om
@@ -5954,7 +5986,6 @@ oryol.ru
 palana.ru
 penza.ru
 perm.ru
-pskov.ru
 ptz.ru
 rnd.ru
 ryazan.ru
@@ -6325,11 +6356,35 @@ mil.to
 // Submitted by Ryan Sleevi <ryan.sleevi@gmail.com> 2014-01-03
 tp
 
-// tr : http://en.wikipedia.org/wiki/.tr
-*.tr
-!nic.tr
-// Used by government in the TRNC
-// http://en.wikipedia.org/wiki/.nc.tr
+// subTLDs: https://www.nic.tr/forms/eng/policies.pdf
+//     and: https://www.nic.tr/forms/politikalar.pdf
+// Submitted by <mehmetgurevin@gmail.com> 2014-07-19
+tr
+com.tr
+info.tr
+biz.tr
+net.tr
+org.tr
+web.tr
+gen.tr
+tv.tr
+av.tr
+dr.tr
+bbs.tr
+name.tr
+tel.tr
+gov.tr
+bel.tr
+pol.tr
+mil.tr
+k12.tr
+edu.tr
+kep.tr
+
+// Used by Northern Cyprus
+nc.tr
+
+// Used by government agencies of Northern Cyprus
 gov.nc.tr
 
 // travel : http://en.wikipedia.org/wiki/.travel
@@ -6491,19 +6546,19 @@ com.ug
 org.ug
 
 // uk : http://en.wikipedia.org/wiki/.uk
-// Submitted by registry <noc@nominet.org.uk> 2012-10-02
-// and tweaked by us pending further consultation.
-*.uk
+// Submitted by registry <Michael.Daly@nominet.org.uk>
+uk
+ac.uk
+co.uk
+gov.uk
+ltd.uk
+me.uk
+net.uk
+nhs.uk
+org.uk
+plc.uk
+police.uk
 *.sch.uk
-!bl.uk
-!british-library.uk
-!jet.uk
-!mod.uk
-!national-library-scotland.uk
-!nel.uk
-!nic.uk
-!nls.uk
-!parliament.uk
 
 // us : http://en.wikipedia.org/wiki/.us
 us
@@ -6604,7 +6659,7 @@ k12.mo.us
 k12.ms.us
 k12.mt.us
 k12.nc.us
-k12.nd.us
+// k12.nd.us  Bug 1028347 - Removed at request of Travis Rosso <trossow@nd.gov>
 k12.ne.us
 k12.nh.us
 k12.nj.us
@@ -6629,7 +6684,6 @@ k12.wa.us
 k12.wi.us
 // k12.wv.us  Bug 947705 - Removed at request of Verne Britton <verne@wvnet.edu>
 k12.wy.us
-
 cc.ak.us
 cc.al.us
 cc.ar.us
@@ -6685,7 +6739,6 @@ cc.wa.us
 cc.wi.us
 cc.wv.us
 cc.wy.us
-
 lib.ak.us
 lib.al.us
 lib.ar.us
@@ -6741,7 +6794,6 @@ lib.wa.us
 lib.wi.us
 // lib.wv.us  Bug 941670 - Removed at request of Larry W Arnold <arnold@wvlc.lib.wv.us>
 lib.wy.us
-
 // k12.ma.us contains school districts in Massachusetts. The 4LDs are
 //  managed indepedently except for private (PVT), charter (CHTR) and
 //  parochial (PAROCH) schools.  Those are delegated dorectly to the
@@ -6781,16 +6833,24 @@ edu.vc
 
 // ve : https://registro.nic.ve/
 // Confirmed by registry 2012-10-04
+// Updated 2014-05-20 - Bug 940478
 ve
+arts.ve
 co.ve
 com.ve
 e12.ve
 edu.ve
+firm.ve
+gob.ve
 gov.ve
 info.ve
+int.ve
 mil.ve
 net.ve
 org.ve
+rec.ve
+store.ve
+tec.ve
 web.ve
 
 // vg : http://en.wikipedia.org/wiki/.vg
@@ -6823,8 +6883,12 @@ pro.vn
 health.vn
 
 // vu : http://en.wikipedia.org/wiki/.vu
-// list of 2nd level tlds ?
+// http://www.vunic.vu/
 vu
+com.vu
+edu.vu
+net.vu
+org.vu
 
 // wf : http://www.afnic.fr/medias/documents/AFNIC-naming-policy2012.pdf
 wf
@@ -6950,7 +7014,14 @@ xn--mgb9awbf
 xn--ygbi2ammx
 
 // xn--90a3ac ("srb" Cyrillic) : RS
+// http://www.rnids.rs/en/the-.срб-domain
 xn--90a3ac
+xn--o1ac.xn--90a3ac
+xn--c1avg.xn--90a3ac
+xn--90azh.xn--90a3ac
+xn--d1at.xn--90a3ac
+xn--o1ach.xn--90a3ac
+xn--80au.xn--90a3ac
 
 // xn--p1ai ("rf" Russian-Cyrillic) : RU
 // http://www.cctld.ru/en/docs/rulesrf.php
@@ -7026,975 +7097,1513 @@ xxx
 *.zw
 
 
-// xn--80asehdb : 2013-07-14 CORE Association
-xn--80asehdb
+// List of new gTLDs imported from https://newgtlds.icann.org/newgtlds.csv on 2014-09-02T12:02:06Z
 
-// xn--80aswg : 2013-07-14 CORE Association
-xn--80aswg
+// abbott : 2014-07-24 Abbott Laboratories, Inc.
+abbott
 
-// xn--ngbc5azd : 2013-07-14 International Domain Registry Pty. Ltd.
-xn--ngbc5azd
+// abogado : 2014-04-24 Top Level Domain Holdings Limited
+abogado
 
-// xn--unup4y : 2013-07-14 Spring Fields, LLC
-xn--unup4y
+// academy : 2013-11-07 Half Oaks, LLC
+academy
 
-// xn--vhquv : 2013-08-28 Dash McCook, LLC
-xn--vhquv
+// accenture : 2014-08-15 Accenture plc
+accenture
 
-// camera : 2013-08-28 Atomic Maple, LLC
-camera
+// accountants : 2014-03-20 Knob Town, LLC
+accountants
 
-// clothing : 2013-08-28 Steel Lake, LLC
-clothing
+// active : 2014-05-01 The Active Network, Inc
+active
 
-// lighting : 2013-08-28 John McCook, LLC
-lighting
+// actor : 2013-12-12 United TLD Holdco Ltd.
+actor
 
-// singles : 2013-08-28 Fern Madison, LLC
-singles
+// africa : 2014-03-24 ZA Central Registry NPC trading as Registry.Africa
+africa
 
-// ventures : 2013-08-28 Binky Lake, LLC
-ventures
+// agency : 2013-11-14 Steel Falls, LLC
+agency
 
-// voyage : 2013-08-28 Ruby House, LLC
-voyage
+// airforce : 2014-03-06 United TLD Holdco Ltd.
+airforce
 
-// guru : 2013-08-28 Pioneer Cypress, LLC
-guru
+// allfinanz : 2014-07-03 Allfinanz Deutsche Vermögensberatung Aktiengesellschaft
+allfinanz
 
-// holdings : 2013-08-28 John Madison, LLC
-holdings
+// alsace : 2014-07-02 REGION D ALSACE
+alsace
 
-// equipment : 2013-08-28 Corn Station, LLC
-equipment
+// amsterdam : 2014-07-24 Gemeente Amsterdam
+amsterdam
 
-// bike : 2013-08-28 Grand Hollow, LLC
-bike
+// android : 2014-08-07 Charleston Road Registry Inc.
+android
 
-// estate : 2013-08-28 Trixy Park, LLC
-estate
+// aquarelle : 2014-07-24 Aquarelle.com
+aquarelle
 
-// tattoo : 2013-08-30 Uniregistry,Corp.
-tattoo
+// archi : 2014-02-06 STARTING DOT LIMITED
+archi
 
-// xn--3ds443g : 2013-09-09 TLD Registry Limited
-xn--3ds443g
+// army : 2014-03-06 United TLD Holdco Ltd.
+army
 
-// xn--fiq228c5hs : 2013-09-09 TLD Registry Limited
-xn--fiq228c5hs
+// associates : 2014-03-06 Baxter Hill, LLC
+associates
 
-// land : 2013-09-10 Pine Moon, LLC
-land
+// attorney : 2014-03-20 undefined
+attorney
 
-// plumbing : 2013-09-10 Spring Tigers, LLC
-plumbing
+// auction : 2014-03-20 undefined
+auction
 
-// contractors : 2013-09-10 Magic Woods, LLC
-contractors
+// audio : 2014-03-20 Uniregistry, Corp.
+audio
 
-// sexy : 2013-09-11 Uniregistry,Corp.
-sexy
+// autos : 2014-01-09 DERAutos, LLC
+autos
 
-// menu : 2013-09-11 Wedding TLD2, LLC
-menu
+// axa : 2013-12-19 AXA SA
+axa
 
-// xn--rhqv96g : 2013-09-11 Stable Tone Limited
-xn--rhqv96g
+// band : 2014-06-12 Auburn Hollow, LLC
+band
 
-// uno : 2013-09-11 Dot Latin, LLC
-uno
+// bar : 2013-12-12 Punto 2012 Sociedad Anonima Promotora de Inversion de Capital Variable
+bar
 
-// gallery : 2013-09-13 Sugar House, LLC
-gallery
+// barcelona : 2014-07-24 Municipi de Barcelona
+barcelona
 
-// technology : 2013-09-13 Auburn Falls
-technology
+// bargains : 2013-11-14 Half Hallow, LLC
+bargains
 
-// xn--3bst00m : 2013-09-13 Eagle Horizon Limited
-xn--3bst00m
+// bauhaus : 2014-04-17 Werkhaus GmbH
+bauhaus
 
-// reviews : 2013-09-13 Extra Cover, LLC
-reviews
+// bayern : 2014-01-23 Bayern Connect GmbH
+bayern
 
-// guide : 2013-09-13 Snow Moon, LLC
-guide
+// bcn : 2014-07-24 Municipi de Barcelona
+bcn
 
-// xn--6qq986b3x1 : 2013-09-13 Tycoon Treasure Limited
-xn--6qq986b3xl
+// beer : 2014-01-09 Top Level Domain Holdings Limited
+beer
 
-// graphics : 2013-09-13 Over Madison, LLC
-graphics
+// berlin : 2013-10-31 dotBERLIN GmbH & Co. KG
+berlin
 
-// construction : 2013-09-13 Fox Dynamite, LLC
-construction
+// best : 2013-12-19 BestTLD Pty Ltd
+best
 
-// onl : 2013-09-16 I-Registry Ltd.
-onl
+// bharti : 2014-01-09 Bharti Enterprises (Holding) Private Limited
+bharti
 
-// xn--q9jyb4c : 2013-09-17 Charleston Road Registry
-xn--q9jyb4c
+// bible : 2014-06-19 American Bible Society
+bible
 
-// diamonds : 2013-09-23 John Edge, LLC
-diamonds
+// bid : 2013-12-19 dot Bid Limited
+bid
 
-// kiwi : 2013-09-23 Dot Kiwi Limited
-kiwi
+// bike : 2013-08-27 Grand Hollow, LLC
+bike
 
-// enterprises : 2013-09-23 Snow Oaks LLC
-enterprises
+// bio : 2014-03-06 STARTING DOT LIMITED
+bio
 
-// today : 2013-09-23 Pearl Woods, LLC
-today
+// black : 2014-01-16 Afilias Limited
+black
 
-// futbol : 2013-09-23 Atomic Falls, LLC
-futbol
+// blackfriday : 2014-01-16 Uniregistry, Corp.
+blackfriday
 
-// photography : 2013-09-23 Sugar Glen, LLC
-photography
+// bloomberg : 2014-07-17 Bloomberg IP Holdings LLC
+bloomberg
 
-// tips : 2013-09-23 Corn Willow, LLC
-tips
+// blue : 2013-11-07 Afilias Limited
+blue
 
-// directory : 2013-09-23 Extra Madison, LLC
-directory
+// bmw : 2014-01-09 Bayerische Motoren Werke Aktiengesellschaft
+bmw
 
-// kitchen : 2013-09-23 Just Goodbye, LLC
-kitchen
+// bnl : 2014-07-24 Banca Nazionale del Lavoro
+bnl
 
-// xn--6frz82g : 2013-09-24 Afilias Limited
-xn--6frz82g
+// bnpparibas : 2014-05-29 BNP Paribas
+bnpparibas
 
-// kim : 2013-09-24 Afilias Limited
-kim
+// bond : 2014-06-05 Bond University Limited
+bond
 
-// xn--cg4bki : 2013-09-27 Samsung SDS Co., LTD
-xn--cg4bki
+// boo : 2014-01-30 Charleston Road Registry Inc.
+boo
 
-// monash : 2013-10-01 Monash University
-monash
+// boutique : 2013-11-14 Over Galley, LLC
+boutique
 
-// wed : 2013-10-02 Atgron, Inc.
-wed
+// brussels : 2014-02-06 DNS.be vzw
+brussels
 
-// pink : 2013-10-02 Afilias Limited
-pink
+// budapest : 2013-11-21 Top Level Domain Holdings Limited
+budapest
 
-// ruhr : 2013-10-02 regiodot GmbH & Co. KG
-ruhr
+// build : 2013-11-07 Plan Bee LLC
+build
 
-// buzz : 2013-10-03 DOTSTRATEGY CO.
-buzz
+// builders : 2013-11-07 Atomic Madison, LLC
+builders
 
-// careers : 2013-10-03 Wild Corner, LLC
-careers
+// business : 2013-11-07 Spring Cross, LLC
+business
 
-// shoes : 2013-10-03 Binky Galley, LLC
-shoes
+// buzz : 2013-10-02 DOTSTRATEGY CO.
+buzz
 
-// xn--4gbrim : 2013-10-07 Suhub Electronic Establishment
-xn--4gbrim
+// bzh : 2014-02-27 Association www.bzh
+bzh
 
-// career : 2013-10-09 dotCareer, LLC
-career
+// cab : 2013-10-24 Half Sunset, LLC
+cab
 
-// otsuka : 2013-10-11 Otsuka Holdings Co. Ltd.
-otsuka
+// cal : 2014-07-24 Charleston Road Registry Inc.
+cal
 
-// xn--fiQ64b : 2013-10-14 CITIC Group Corporation
-xn--fiq64b
+// camera : 2013-08-27 Atomic Maple, LLC
+camera
 
-// gift : 2013-10-18 Uniregistry Corp.
-gift
+// camp : 2013-11-07 Delta Dynamite, LLC
+camp
 
-// recipes : 2013-10-18 Grand Island, LLC
-recipes
+// cancerresearch : 2014-05-15 Australian Cancer Research Foundation
+cancerresearch
 
-// coffee : 2013-10-18 Trixy Cover, LLC
-coffee
+// capetown : 2014-03-24 ZA Central Registry NPC trading as ZA Central Registry
+capetown
 
-// luxury : 2013-10-18 Luxury Partners, LLC
-luxury
+// capital : 2014-03-06 Delta Mill, LLC
+capital
 
-// domains : 2013-10-18 Sugar Cross, LLC
-domains
+// caravan : 2013-12-12 Caravan International, Inc.
+caravan
 
-// photos : 2013-10-18 Sea Corner, LLC
-photos
+// cards : 2013-12-05 Foggy Hollow, LLC
+cards
 
-// limo : 2013-10-18 Hidden Frostbite, LLC
-limo
+// care : 2014-03-06 Goose Cross
+care
 
-// viajes : 2013-10-18 Black Madison, LLC
-viajes
+// career : 2013-10-09 dotCareer LLC
+career
 
-// wang : 2013-10-24 Zodiac Leo Limited
-wang
+// careers : 2013-10-02 Wild Corner, LLC
+careers
 
-// democrat : 2013-10-24 United TLD Holdco Ltd.
-democrat
+// cartier : 2014-06-23 Richemont DNS Inc.
+cartier
 
-// mango : 2013-10-25 PUNTO FA S.L.
-mango
+// casa : 2013-11-21 Top Level Domain Holdings Limited
+casa
 
-// cab : 2013-10-25 Half Sunset, LLC
-cab
+// cash : 2014-03-06 Delta Lake, LLC
+cash
 
-// support : 2013-10-25 Grand Orchard, LLC
-support
+// catering : 2013-12-05 New Falls. LLC
+catering
 
-// dance : 2013-10-25 United TLD Holdco Ltd.
-dance
+// cba : 2014-06-26 COMMONWEALTH BANK OF AUSTRALIA
+cba
 
-// nagoya : 2013-10-25 GMO Registry, Inc.
-nagoya
+// cbn : 2014-08-22 The Christian Broadcasting Network, Inc.
+cbn
 
-// computer : 2013-10-25 Pine Mill, LLC
-computer
+// center : 2013-11-07 Tin Mill, LLC
+center
 
-// wien : 2013-10-28 punkt.wien GmbH
-wien
+// ceo : 2013-11-07 CEOTLD Pty Ltd
+ceo
 
-// berlin : 2013-10-31 dotBERLIN GmbH & Co. KG
-berlin
+// cern : 2014-06-05 European Organization for Nuclear Research (\
+cern
 
-// codes : 2013-10-31 Puff Willow, LLC
-codes
+// cfa : 2014-08-28 CFA Institute
+cfa
 
-// email : 2013-10-31 Spring Madison, LLC
-email
+// channel : 2014-05-08 Charleston Road Registry Inc.
+channel
 
-// xn--mgbab2bd : 2013-10-31 CORE Association
-xn--mgbab2bd
+// cheap : 2013-11-14 Sand Cover, LLC
+cheap
 
-// repair : 2013-11-07 Lone Sunset, LLC
-repair
+// christmas : 2013-11-21 Uniregistry, Corp.
+christmas
 
-// holiday : 2013-11-07 Goose Woods, LLC
-holiday
+// chrome : 2014-07-24 Charleston Road Registry Inc.
+chrome
 
-// center : 2013-11-07 Tin Mill, LLC
-center
+// church : 2014-02-06 Holly Fileds, LLC
+church
 
-// systems : 2013-11-07 Dash Cypress, LLC
-systems
+// citic : 2014-01-09 CITIC Group Corporation
+citic
 
-// wiki : 2013-11-07 Top Level Design, LLC
-wiki
+// city : 2014-05-29 Snow Sky, LLC
+city
 
-// ceo : 2013-11-07 CEOTLD Pty Ltd
-ceo
+// claims : 2014-03-20 Black Corner, LLC
+claims
 
-// international : 2013-11-07 Wild Way, LLC
-international
+// cleaning : 2013-12-05 Fox Shadow, LLC
+cleaning
 
-// solar : 2013-11-07 Ruby Town, LLC
-solar
+// click : 2014-06-05 Uniregistry, Corp.
+click
 
-// company : 2013-11-07 Silver Avenue, LLC
-company
+// clinic : 2014-03-20 Goose Park, LLC
+clinic
 
-// education : 2013-11-07 Brice Way, LLC
-education
+// clothing : 2013-08-27 Steel Lake, LLC
+clothing
 
-// training : 2013-11-07 Wild Willow, LLC
-training
+// club : 2013-11-08 .CLUB DOMAINS, LLC
+club
 
-// academy : 2013-11-07 Half Oaks, LLC
-academy
+// codes : 2013-10-31 Puff Willow, LLC
+codes
 
-// marketing : 2013-11-07 Fern Pass, LLC
-marketing
+// coffee : 2013-10-17 Trixy Cover, LLC
+coffee
 
-// florist : 2013-11-08 Half Cypress, LLC
-florist
+// college : 2014-01-16 XYZ.COM LLC
+college
 
-// solutions : 2013-11-07 Silver Cover, LLC
-solutions
+// cologne : 2014-02-05 NetCologne Gesellschaft für Telekommunikation mbH
+cologne
 
-// build : 2013-11-07 Plan Bee LLC
-build
+// commbank : 2014-06-26 COMMONWEALTH BANK OF AUSTRALIA
+commbank
 
-// institute : 2013-11-07 Outer Maple, LLC
-institute
+// community : 2013-12-05 Fox Orchard, LLC
+community
 
-// builders : 2013-11-07 Atomic Madison, LLC
-builders
+// company : 2013-11-07 Silver Avenue, LLC
+company
 
-// red : 2013-11-07 Afilias Limited
-red
+// computer : 2013-10-24 Pine Mill, LLC
+computer
 
-// blue : 2013-11-07 Afilias Limited
-blue
+// condos : 2013-12-05 Pine House, LLC
+condos
 
-// ninja : 2013-11-07 United TLD Holdco Ltd.
-ninja
+// construction : 2013-09-16 Fox Dynamite, LLC
+construction
 
-// business : 2013-11-07 Spring Cross, LLC
-business
+// consulting : 2013-12-05 undefined
+consulting
 
-// gal : 2013-11-07 Asociación puntoGAL
-gal
+// contractors : 2013-09-10 Magic Woods, LLC
+contractors
 
-// social : 2013-11-07 United TLD Holdco Ltd.
-social
+// cooking : 2013-11-21 Top Level Domain Holdings Limited
+cooking
 
-// house : 2013-11-07 Sugar Park, LLC
-house
+// cool : 2013-11-14 Koko Lake, LLC
+cool
 
-// camp : 2013-11-07 Delta Dynamite, LLC
-camp
+// country : 2013-12-19 Top Level Domain Holdings Limited
+country
 
-// immobilien : 2013-11-07 United TLD Holdco Ltd.
-immobilien
+// credit : 2014-03-20 Snow Shadow, LLC
+credit
 
-// moda : 2013-11-07 United TLD Holdco Ltd.
-moda
+// creditcard : 2014-03-20 Binky Frostbite, LLC
+creditcard
 
-// glass : 2013-11-07 Black Cover, LLC
-glass
+// crs : 2014-04-03 Federated Co-operatives Limited
+crs
 
-// management : 2013-11-07 John Goodbye, LLC
-management
+// cruises : 2013-12-05 Spring Way, LLC
+cruises
 
-// kaufen : 2013-11-07 United TLD Holdco Ltd.
-kaufen
+// cuisinella : 2014-04-03 SALM S.A.S.
+cuisinella
 
-// farm : 2013-11-07 Just Maple, LLC
-farm
+// cymru : 2014-05-08 Nominet UK
+cymru
 
-// xn--55qw42g : 2013-11-08 China Organizational Name Administration Center
-xn--55qw42g
+// dabur : 2014-02-06 Dabur India Limited
+dabur
 
-// xn--zfr164b : 2013-11-08 China Organizational Name Administration Center
-xn--zfr164b
+// dad : 2014-01-23 Charleston Road Registry Inc.
+dad
 
-// club : 2013-11-08 .CLUB DOMAINS, LLC
-club
+// dance : 2013-10-24 United TLD Holdco Ltd.
+dance
 
-// voting : 2013-11-13 Valuetainment Corp.
-voting
+// dating : 2013-12-05 Pine Fest, LLC
+dating
 
-// TOKYO : 2013-11-13 GMO Registry, Inc.
-tokyo
+// datsun : 2014-03-27 NISSAN MOTOR CO., LTD.
+datsun
 
-// moe : 2013-11-13 Interlink Co., Ltd.
-moe
+// day : 2014-01-30 Charleston Road Registry Inc.
+day
 
-// guitars : 2013-11-14 Uniregistry, Corp.
-guitars
+// deals : 2014-05-22 Sand Sunset, LLC
+deals
 
-// bargains : 2013-11-14 Half Hallow, LLC
-bargains
+// degree : 2014-03-06 undefined
+degree
 
-// xn--nqv7fs00ema : 2013-11-14 Public Interest Registry
-xn--nqv7fs00ema
+// democrat : 2013-10-24 United TLD Holdco Ltd.
+democrat
+
+// dental : 2014-03-20 Tin Birch, LLC
+dental
+
+// dentist : 2014-03-20 undefined
+dentist
 
 // desi : 2013-11-14 Desi Networks LLC
 desi
 
-// cool : 2013-11-14 Koko Lake, LLC
-cool
+// diamonds : 2013-09-22 John Edge, LLC
+diamonds
 
-// boutique : 2013-11-14 Over Galley, LLC
-boutique
+// diet : 2014-06-26 Uniregistry, Corp.
+diet
 
-// pics : 2013-11-14 Uniregistry, Corp.
-pics
+// digital : 2014-03-06 Dash Park, LLC
+digital
 
-// xn--c1avg : 2013-11-14 Public Interest Registry
-xn--c1avg
+// direct : 2014-04-10 Half Trail, LLC
+direct
 
-// xn--55qx5d : 2013-11-14 Computer Network Information Center of Chinese Academy of Sciences (China Internet Network Information Center)
-xn--55qx5d
+// directory : 2013-09-20 Extra Madison, LLC
+directory
 
-// xn--io0a7i : 2013-11-14 Computer Network Information Center of Chinese Academy of Sciences (China Internet Network Information Center)
-xn--io0a7i
+// discount : 2014-03-06 Holly Hill, LLC
+discount
 
-// cheap : 2013-11-14 Sand Cover, LLC
-cheap
+// dnp : 2013-12-13 Dai Nippon Printing Co., Ltd.
+dnp
 
-// xn--xhq521b : 2013-11-14 Guangzhou YU Wei Information Technology Co., Ltd.
-xn--xhq521b
+// domains : 2013-10-17 Sugar Cross, LLC
+domains
 
-// photo : 2013-11-14 Uniregistry, Corp.
-photo
+// doosan : 2014-04-03 Doosan Corporation
+doosan
 
-// network : 2013-11-14 Trixy Manor, LLC
-network
+// durban : 2014-03-24 ZA Central Registry NPC trading as ZA Central Registry
+durban
 
-// zone : 2013-11-14 Outer Falls, LLC
-zone
+// dvag : 2014-06-23 Deutsche Vermögensberatung Aktiengesellschaft DVAG
+dvag
 
-// xn--nqv7f : 2013-11-14 Public Interest Registry
-xn--nqv7f
+// eat : 2014-01-23 Charleston Road Registry Inc.
+eat
 
-// link : 2013-11-14 Uniregistry, Corp.
-link
+// education : 2013-11-07 Brice Way, LLC
+education
 
-// QPON : 2013-11-14 dotCOOL, Inc.
-qpon
+// email : 2013-10-31 Spring Madison, LLC
+email
 
-// xn--i1b6b1a6a2e : 2013-11-14 Public Interest Registry
-xn--i1b6b1a6a2e
+// emerck : 2014-04-03 Merck KGaA
+emerck
 
-// agency : 2013-11-14 Steel Falls, LLC
-agency
+// engineer : 2014-03-06 United TLD Holdco Ltd.
+engineer
 
-// tienda : 2013-11-14 Victor Manor, LLC
-tienda
+// engineering : 2014-03-06 Romeo Canyon
+engineering
 
-// works : 2013-11-14 Little Dynamite, LLC
-works
+// enterprises : 2013-09-20 Snow Oaks, LLC
+enterprises
 
-// london : 2013-11-14 Dot London Domains Limited
-london
+// equipment : 2013-08-27 Corn Station, LLC
+equipment
 
-// watch : 2013-11-14 Sand Shadow, LLC
-watch
+// erni : 2014-04-03 ERNI Group Holding AG
+erni
 
-// rocks : 2013-11-14 Ruby Moon, LLC
-rocks
+// esq : 2014-05-08 Charleston Road Registry Inc.
+esq
 
-// SHIKSHA : 2013-11-14 Afilias Limited
-shiksha
+// estate : 2013-08-27 Trixy Park, LLC
+estate
 
-// xn--d1acj3b : 2013-11-21 The Foundation for Network Initiatives “The Smart Internet”
-xn--d1acj3b
+// eurovision : 2014-04-24 European Broadcasting Union (EBU)
+eurovision
 
-// budapest : 2013-11-21 Top Level Domain Holdings Limited
-budapest
+// eus : 2013-12-12 Puntueus Fundazioa
+eus
 
-// nrw : 2013-11-21 Minds + Machines GmbH
-nrw
+// events : 2013-12-05 Pioneer Maple, LLC
+events
 
-// VOTE : 2013-11-21 Monolith Registry LLC
-vote
+// everbank : 2014-05-15 EverBank
+everbank
 
-// fishing : 2013-11-21 Top Level Domain Holdings Limited
-fishing
+// exchange : 2014-03-06 Spring Falls, LLC
+exchange
 
 // expert : 2013-11-21 Magic Pass, LLC
 expert
 
-// horse : 2013-11-21 Top Level Domain Holdings Limited
-horse
+// exposed : 2013-12-05 Victor Beach, LLC
+exposed
 
-// christmas : 2013-11-21 Uniregistry, Corp.
-christmas
+// fail : 2014-03-06 Atomic Pipe, LLC
+fail
 
-// cooking : 2013-11-21 Top Level Domain Holdings Limited
-cooking
+// fan : 2014-03-06 undefined
+fan
 
-// xn--czru2d : 2013-11-21 Zodiac Capricorn Limited
-xn--czru2d
+// farm : 2013-11-07 Just Maple, LLC
+farm
 
-// casa : 2013-11-21 Top Level Domain Holdings Limited
-casa
+// fashion : 2014-07-03 Top Level Domain Holdings Limited
+fashion
 
-// rich : 2013-11-21 I-REGISTRY Ltd., Niederlassung Deutschland
-rich
+// feedback : 2013-12-19 Top Level Spectrum, Inc.
+feedback
 
-// VOTO : 2013-11-21 Monolith Registry LLC
-voto
+// finance : 2014-03-20 Cotton Cypress, LLC
+finance
 
-// tools : 2013-11-21 Pioneer North, LLC
-tools
+// financial : 2014-03-06 Just Cover, LLC
+financial
 
-// xn--45q11c : 2013-11-21 Zodiac Scorpio Limited
-xn--45q11c
+// firmdale : 2014-03-27 Firmdale Holdings Limited
+firmdale
 
-// praxi : 2013-12-05 Praxi S.p.A.
-praxi
+// fish : 2013-12-12 Fox Woods, LLC
+fish
 
-// events : 2013-12-05 Pioneer Maple, LLC
-events
+// fishing : 2013-11-21 Top Level Domain Holdings Limited
+fishing
+
+// fitness : 2014-03-06 Brice Orchard, LLC
+fitness
 
 // flights : 2013-12-05 Fox Station, LLC
 flights
 
-// report : 2013-12-05 Binky Glen, LLC
-report
+// florist : 2013-11-07 Half Cypress, LLC
+florist
 
-// partners : 2013-12-05 Magic Glen, LLC
-partners
+// flsmidth : 2014-07-24 FLSmidth A/S
+flsmidth
 
-// neustar : 2013-12-05 NeuStar, Inc.
-neustar
+// fly : 2014-05-08 Charleston Road Registry Inc.
+fly
 
-// rentals : 2013-12-05 Big Hollow,LLC
-rentals
+// foo : 2014-01-23 Charleston Road Registry Inc.
+foo
 
-// catering : 2013-12-05 New Falls. LLC
-catering
+// forsale : 2014-05-22 undefined
+forsale
 
-// community : 2013-12-05 Fox Orchard, LLC
-community
+// foundation : 2013-12-05 John Dale, LLC
+foundation
 
-// maison : 2013-12-05 Victor Frostbite, LLC
-maison
+// frl : 2014-05-15 FRLregistry B.V.
+frl
 
-// parts : 2013-12-05 Sea Goodbye, LLC
-parts
+// frogans : 2013-12-19 OP3FT
+frogans
 
-// cleaning : 2013-12-05 Fox Shadow, LLC
-cleaning
+// fund : 2014-03-20 John Castle, LLC
+fund
 
-// okinawa : 2013-12-05 BusinessRalliart inc.
-okinawa
+// furniture : 2014-03-20 Lone Fields, LLC
+furniture
 
-// foundation : 2013-12-05 John Dale, LLC
-foundation
+// futbol : 2013-09-20 undefined
+futbol
 
-// properties : 2013-12-05 Big Pass, LLC
-properties
+// gal : 2013-11-07 Asociación puntoGAL
+gal
 
-// vacations : 2013-12-05 Atomic Tigers, LLC
-vacations
+// gallery : 2013-09-13 Sugar House, LLC
+gallery
 
-// productions : 2013-12-05 Magic Birch, LLC
-productions
+// garden : 2014-06-26 Top Level Domain Holdings Limited
+garden
 
-// industries : 2013-12-05 Outer House, LLC
-industries
+// gbiz : 2014-07-17 Charleston Road Registry Inc.
+gbiz
 
-// haus : 2013-12-05 Pixie Edge, LLC
-haus
+// gdn : 2014-07-31 Joint Stock Company \
+gdn
 
-// vision : 2013-12-05 Koko Station, LLC
-vision
+// gent : 2014-01-23 COMBELL GROUP NV/SA
+gent
 
-// mormon : 2013-12-05 IRI Domain Management, LLC (""Applicant"")
-mormon
+// ggee : 2014-01-09 GMO Internet, Inc.
+ggee
 
-// cards : 2013-12-05 Foggy Hollow, LLC
-cards
+// gift : 2013-10-17 Uniregistry, Corp.
+gift
 
-// ink : 2013-12-05 Top Level Design, LLC
-ink
+// gifts : 2014-07-03 Goose Sky, LLC
+gifts
 
-// villas : 2013-12-05 New Sky, LLC
-villas
+// gives : 2014-03-06 United TLD Holdco Ltd.
+gives
 
-// consulting : 2013-12-05 Pixie Station, LLC
-consulting
+// glass : 2013-11-07 Black Cover, LLC
+glass
 
-// cruises : 2013-12-05 Spring Way, LLC
-cruises
+// gle : 2014-07-24 Charleston Road Registry Inc.
+gle
 
-// krd : 2013-12-05 KRG Department of Information Technology
-krd
+// global : 2014-04-17 Dot GLOBAL AS
+global
 
-// xyz : 2013-12-05 XYZ.COM LLC
-xyz
+// globo : 2013-12-19 Globo Comunicação e Participações S.A
+globo
 
-// dating : 2013-12-05 Pine Fest, LLC
-dating
+// gmail : 2014-05-01 Charleston Road Registry Inc.
+gmail
 
-// exposed : 2013-12-05 Victor Beach, LLC
-exposed
+// gmo : 2014-01-09 GMO Internet, Inc.
+gmo
 
-// condos : 2013-12-05 Pine House, LLC
-condos
+// gmx : 2014-04-24 1&1 Mail & Media GmbH
+gmx
 
-// eus : 2013-12-12 Puntueus Fundazioa
-eus
+// google : 2014-07-24 Charleston Road Registry Inc.
+google
 
-// Caravan : 2013-12-12 Caravan International, Inc.
-caravan
+// gop : 2014-01-16 Republican State Leadership Committee, Inc.
+gop
 
-// actor : 2013-12-12 United TLD Holdco Ltd.
-actor
+// graphics : 2013-09-13 Over Madison, LLC
+graphics
 
-// saarland : 2013-12-12 dotSaarland GmbH
-saarland
+// gratis : 2014-03-20 Pioneer Tigers, LLC
+gratis
 
-// yokohama : 2013-12-12 GMO Registry, Inc.
-yokohama
+// green : 2014-05-08 Afilias Limited
+green
 
-// pub : 2013-12-12 United TLD Holdco Ltd.
-pub
+// gripe : 2014-03-06 Corn Sunset, LLC
+gripe
 
-// xn--p1acf : 2013-12-12 Rusnames Limited
-xn--p1acf
+// group : 2014-08-15 Romeo Town, LLC
+group
 
-// ren : 2013-12-12 Beijing Qianxiang Wangjing Technology Development Co., Ltd.
-ren
+// guge : 2014-08-28 Charleston Road Registry Inc.
+guge
 
-// fish : 2013-12-12 Fox Woods, LLC
-fish
+// guide : 2013-09-13 Snow Moon, LLC
+guide
 
-// BAR : 2013-12-12 Punto 2012 Sociedad Anonima Promotora de Inversion de Capital Variable
-bar
+// guitars : 2013-11-14 Uniregistry, Corp.
+guitars
 
-// DNP : 2013-12-13 Dai Nippon Printing Co., Ltd.
-dnp
+// guru : 2013-08-27 Pioneer Cypress, LLC
+guru
 
-// bid : 2013-12-19 dot Bid Limited
-bid
+// hamburg : 2014-02-20 Hamburg Top-Level-Domain GmbH
+hamburg
 
-// supply : 2013-12-19 Half Falls, LLC
-supply
+// haus : 2013-12-05 undefined
+haus
+
+// healthcare : 2014-06-12 Silver Glen, LLC
+healthcare
+
+// help : 2014-06-26 Uniregistry, Corp.
+help
+
+// here : 2014-02-06 Charleston Road Registry Inc.
+here
+
+// hermes : 2014-07-10 HERMES INTERNATIONAL
+hermes
+
+// hiphop : 2014-03-06 Uniregistry, Corp.
+hiphop
+
+// hiv : 2014-03-13 dotHIV gemeinnuetziger e.V.
+hiv
+
+// holdings : 2013-08-27 John Madison, LLC
+holdings
+
+// holiday : 2013-11-07 Goose Woods, LLC
+holiday
+
+// homes : 2014-01-09 DERHomes, LLC
+homes
+
+// horse : 2013-11-21 Top Level Domain Holdings Limited
+horse
+
+// host : 2014-04-17 DotHost Inc.
+host
+
+// hosting : 2014-05-29 Uniregistry, Corp.
+hosting
+
+// house : 2013-11-07 Sugar Park, LLC
+house
+
+// how : 2014-01-23 Charleston Road Registry Inc.
+how
+
+// ibm : 2014-07-31 International Business Machines Corporation
+ibm
+
+// ifm : 2014-01-30 ifm electronic gmbh
+ifm
+
+// iinet : 2014-07-03 Connect West Pty. Ltd.
+iinet
+
+// immo : 2014-07-10 Auburn Bloom, LLC
+immo
+
+// immobilien : 2013-11-07 United TLD Holdco Ltd.
+immobilien
+
+// industries : 2013-12-05 Outer House, LLC
+industries
+
+// infiniti : 2014-03-27 NISSAN MOTOR CO., LTD.
+infiniti
+
+// ing : 2014-01-23 Charleston Road Registry Inc.
+ing
+
+// ink : 2013-12-05 Top Level Design, LLC
+ink
+
+// institute : 2013-11-07 Outer Maple, LLC
+institute
+
+// insure : 2014-03-20 Pioneer Willow, LLC
+insure
+
+// international : 2013-11-07 Wild Way, LLC
+international
+
+// investments : 2014-03-20 Holly Glen, LLC
+investments
+
+// ipiranga : 2014-08-28 Ipiranga Produtos de Petroleo S.A.
+ipiranga
+
+// irish : 2014-08-07 Dot-Irish LLC
+irish
+
+// ist : 2014-08-28 Istanbul Metropolitan Municipality
+ist
+
+// istanbul : 2014-08-28 Istanbul Metropolitan Municipality
+istanbul
+
+// iwc : 2014-06-23 Richemont DNS Inc.
+iwc
+
+// java : 2014-06-19 Oracle Corporation
+java
+
+// jetzt : 2014-01-09 New TLD Company AB
+jetzt
+
+// joburg : 2014-03-24 ZA Central Registry NPC trading as ZA Central Registry
+joburg
+
+// juegos : 2014-03-20 Uniregistry, Corp.
+juegos
+
+// kaufen : 2013-11-07 United TLD Holdco Ltd.
+kaufen
+
+// kim : 2013-09-23 Afilias Limited
+kim
+
+// kitchen : 2013-09-20 Just Goodbye, LLC
+kitchen
 
-// Miami : 2013-12-19 Top Level Domain Holdings Limited
+// kiwi : 2013-09-20 DOT KIWI LIMITED
+kiwi
+
+// koeln : 2014-01-09 NetCologne Gesellschaft für Telekommunikation mbH
+koeln
+
+// krd : 2013-12-05 KRG Department of Information Technology
+krd
+
+// kred : 2013-12-19 KredTLD Pty Ltd
+kred
+
+// lacaixa : 2014-01-09 CAIXA D'ESTALVIS I PENSIONS DE BARCELONA
+lacaixa
+
+// land : 2013-09-10 Pine Moon, LLC
+land
+
+// latrobe : 2014-06-16 La Trobe University
+latrobe
+
+// lawyer : 2014-03-20 undefined
+lawyer
+
+// lds : 2014-03-20 IRI Domain Management, LLC (\
+lds
+
+// lease : 2014-03-06 Victor Trail, LLC
+lease
+
+// leclerc : 2014-08-07 A.C.D. LEC Association des Centres Distributeurs Edouard Leclerc
+leclerc
+
+// lgbt : 2014-05-08 Afilias Limited
+lgbt
+
+// life : 2014-02-06 Trixy Oaks, LLC
+life
+
+// lighting : 2013-08-27 John McCook, LLC
+lighting
+
+// limited : 2014-03-06 Big Fest, LLC
+limited
+
+// limo : 2013-10-17 Hidden Frostbite, LLC
+limo
+
+// link : 2013-11-14 Uniregistry, Corp.
+link
+
+// loans : 2014-03-20 June Woods, LLC
+loans
+
+// london : 2013-11-14 Dot London Domains Limited
+london
+
+// lotto : 2014-04-10 Afilias Limited
+lotto
+
+// ltda : 2014-04-17 DOMAIN ROBOT SERVICOS DE HOSPEDAGEM NA INTERNET LTDA
+ltda
+
+// luxe : 2014-01-09 Top Level Domain Holdings Limited
+luxe
+
+// luxury : 2013-10-17 Luxury Partners, LLC
+luxury
+
+// madrid : 2014-05-01 Comunidad de Madrid
+madrid
+
+// maison : 2013-12-05 Victor Frostbite, LLC
+maison
+
+// management : 2013-11-07 John Goodbye, LLC
+management
+
+// mango : 2013-10-24 PUNTO FA S.L.
+mango
+
+// market : 2014-03-06 undefined
+market
+
+// marketing : 2013-11-07 Fern Pass, LLC
+marketing
+
+// media : 2014-03-06 Grand Glen, LLC
+media
+
+// meet : 2014-01-16 Afilias Limited
+meet
+
+// melbourne : 2014-05-29 The Crown in right of the State of Victoria, represented by its Department of State Development, Business and Innovation
+melbourne
+
+// meme : 2014-01-30 Charleston Road Registry Inc.
+meme
+
+// menu : 2013-09-11 Wedding TLD2, LLC
+menu
+
+// miami : 2013-12-19 Top Level Domain Holdings Limited
 miami
 
-// supplies : 2013-12-19 Atomic Fields, LLC
-supplies
+// mini : 2014-01-09 Bayerische Motoren Werke Aktiengesellschaft
+mini
+
+// moda : 2013-11-07 United TLD Holdco Ltd.
+moda
+
+// moe : 2013-11-13 Interlink Co., Ltd.
+moe
+
+// monash : 2013-09-30 Monash University
+monash
+
+// montblanc : 2014-06-23 Richemont DNS Inc.
+montblanc
+
+// mormon : 2013-12-05 IRI Domain Management, LLC (\
+mormon
+
+// mortgage : 2014-03-20 undefined
+mortgage
+
+// moscow : 2013-12-19 Foundation for Assistance for Internet Technologies and Infrastructure Development (FAITID)
+moscow
+
+// motorcycles : 2014-01-09 DERMotorcycles, LLC
+motorcycles
+
+// mov : 2014-01-30 Charleston Road Registry Inc.
+mov
+
+// nagoya : 2013-10-24 GMO Registry, Inc.
+nagoya
+
+// navy : 2014-03-06 United TLD Holdco Ltd.
+navy
+
+// netbank : 2014-06-26 COMMONWEALTH BANK OF AUSTRALIA
+netbank
+
+// network : 2013-11-14 Trixy Manor, LLC
+network
+
+// neustar : 2013-12-05 NeuStar, Inc.
+neustar
+
+// new : 2014-01-30 Charleston Road Registry Inc.
+new
+
+// nexus : 2014-07-24 Charleston Road Registry Inc.
+nexus
+
+// ngo : 2014-03-06 Public Interest Registry
+ngo
+
+// nhk : 2014-02-13 Japan Broadcasting Corporation (NHK)
+nhk
+
+// ninja : 2013-11-07 United TLD Holdco Ltd.
+ninja
+
+// nissan : 2014-03-27 NISSAN MOTOR CO., LTD.
+nissan
+
+// nra : 2014-05-22 NRA Holdings Company, INC.
+nra
+
+// nrw : 2013-11-21 Minds + Machines GmbH
+nrw
+
+// nyc : 2014-01-23 The City of New York by and through the New York City Department of Information Technology & Telecommunications
+nyc
+
+// okinawa : 2013-12-05 BusinessRalliart inc.
+okinawa
+
+// ong : 2014-03-06 Public Interest Registry
+ong
+
+// onl : 2013-09-16 I-Registry Ltd.
+onl
+
+// ooo : 2014-01-09 INFIBEAM INCORPORATION LIMITED
+ooo
+
+// oracle : 2014-06-19 Oracle Corporation
+oracle
+
+// organic : 2014-03-27 Afilias Limited
+organic
+
+// otsuka : 2013-10-11 Otsuka Holdings Co., Ltd.
+otsuka
+
+// ovh : 2014-01-16 OVH SAS
+ovh
+
+// paris : 2014-01-30 City of Paris
+paris
+
+// partners : 2013-12-05 Magic Glen, LLC
+partners
+
+// parts : 2013-12-05 Sea Goodbye, LLC
+parts
+
+// pharmacy : 2014-06-19 National Association of Boards of Pharmacy
+pharmacy
+
+// photo : 2013-11-14 Uniregistry, Corp.
+photo
+
+// photography : 2013-09-20 Sugar Glen, LLC
+photography
+
+// photos : 2013-10-17 Sea Corner, LLC
+photos
+
+// physio : 2014-05-01 PhysBiz Pty Ltd
+physio
+
+// pics : 2013-11-14 Uniregistry, Corp.
+pics
+
+// pictet : 2014-06-26 Pictet Europe S.A.
+pictet
+
+// pictures : 2014-03-06 Foggy Sky, LLC
+pictures
+
+// pink : 2013-10-01 Afilias Limited
+pink
+
+// pizza : 2014-06-26 Foggy Moon, LLC
+pizza
+
+// place : 2014-04-24 Snow Galley, LLC
+place
+
+// plumbing : 2013-09-10 Spring Tigers, LLC
+plumbing
+
+// pohl : 2014-06-23 Deutsche Vermögensberatung Aktiengesellschaft DVAG
+pohl
+
+// poker : 2014-07-03 Afilias Domains No. 5 Limited
+poker
+
+// praxi : 2013-12-05 Praxi S.p.A.
+praxi
+
+// press : 2014-04-03 DotPress Inc.
+press
+
+// prod : 2014-01-23 Charleston Road Registry Inc.
+prod
+
+// productions : 2013-12-05 Magic Birch, LLC
+productions
+
+// prof : 2014-07-24 Charleston Road Registry Inc.
+prof
+
+// properties : 2013-12-05 Big Pass, LLC
+properties
+
+// property : 2014-05-22 Uniregistry, Corp.
+property
+
+// pub : 2013-12-12 United TLD Holdco Ltd.
+pub
+
+// qpon : 2013-11-14 dotCOOL, Inc.
+qpon
 
 // quebec : 2013-12-19 PointQuébec Inc
 quebec
 
-// MOSCOW : 2013-12-19 Foundation for Assistance for Internet Technologies and Infrastructure Development (FAITID)
-moscow
+// realtor : 2014-05-29 Real Estate Domains LLC
+realtor
 
-// globo : 2013-12-19 Globo Comunicação e Participações S.A
-globo
+// recipes : 2013-10-17 Grand Island, LLC
+recipes
 
-// AXA : 2013-12-19 AXA SA
-axa
+// red : 2013-11-07 Afilias Limited
+red
 
-// xn--80adxhks : 2013-12-19 Foundation for Assistance for Internet Technologies and Infrastructure Development (FAITID)
-xn--80adxhks
+// rehab : 2014-03-06 United TLD Holdco Ltd.
+rehab
 
-// xn--czrs0t : 2013-12-19 Wild Island, LLC
-xn--czrs0t
+// reise : 2014-03-13 dotreise GmbH
+reise
 
-// vodka : 2013-12-19 Top Level Domain Holdings Limited
-vodka
+// reisen : 2014-03-06 New Cypress, LLC
+reisen
 
-// REST : 2013-12-19 Punto 2012 Sociedad Anonima Promotora de Inversion de Capital Variable
+// ren : 2013-12-12 Beijing Qianxiang Wangjing Technology Development Co., Ltd.
+ren
+
+// rentals : 2013-12-05 Big Hollow,LLC
+rentals
+
+// repair : 2013-11-07 Lone Sunset, LLC
+repair
+
+// report : 2013-12-05 Binky Glen, LLC
+report
+
+// republican : 2014-03-20 United TLD Holdco Ltd.
+republican
+
+// rest : 2013-12-19 Punto 2012 Sociedad Anonima Promotora de Inversion de Capital Variable
 rest
 
-// frogans : 2013-12-19 OP3FT
-frogans
+// restaurant : 2014-07-03 Snow Avenue, LLC
+restaurant
 
-// WTC : 2013-12-19 World Trade Centers Association, Inc.
-wtc
+// reviews : 2013-09-13 undefined
+reviews
+
+// rich : 2013-11-21 I-Registry Ltd.
+rich
+
+// rio : 2014-02-27 Empresa Municipal de Informática SA - IPLANRIO
+rio
+
+// rip : 2014-07-10 United TLD Holdco Ltd.
+rip
+
+// rocks : 2013-11-14 undefined
+rocks
 
 // rodeo : 2013-12-19 Top Level Domain Holdings Limited
 rodeo
 
+// rsvp : 2014-05-08 Charleston Road Registry Inc.
+rsvp
+
+// ruhr : 2013-10-02 regiodot GmbH & Co. KG
+ruhr
+
+// ryukyu : 2014-01-09 BusinessRalliart inc.
+ryukyu
+
+// saarland : 2013-12-12 dotSaarland GmbH
+saarland
+
+// samsung : 2014-04-03 SAMSUNG SDS CO., LTD
+samsung
+
+// sap : 2014-03-27 SAP AG
+sap
+
+// sarl : 2014-07-03 Delta Orchard, LLC
+sarl
+
+// sca : 2014-03-13 SVENSKA CELLULOSA AKTIEBOLAGET SCA (publ)
+sca
+
+// scb : 2014-02-20 The Siam Commercial Bank Public Company Limited (\
+scb
+
+// schmidt : 2014-04-03 SALM S.A.S.
+schmidt
+
+// scholarships : 2014-04-24 Scholarships.com, LLC
+scholarships
+
+// schule : 2014-03-06 Outer Moon, LLC
+schule
+
+// scot : 2014-01-23 Dot Scot Registry Limited
+scot
+
+// seat : 2014-05-22 SEAT, S.A. (Sociedad Unipersonal)
+seat
+
+// services : 2014-02-27 Fox Castle, LLC
+services
+
+// sew : 2014-07-17 SEW-EURODRIVE GmbH & Co KG
+sew
+
+// sexy : 2013-09-11 Uniregistry, Corp.
+sexy
+
+// sharp : 2014-05-01 Sharp Corporation
+sharp
+
+// shiksha : 2013-11-14 Afilias Limited
+shiksha
+
+// shoes : 2013-10-02 Binky Galley, LLC
+shoes
+
+// shriram : 2014-01-23 Shriram Capital Ltd.
+shriram
+
+// singles : 2013-08-27 Fern Madison, LLC
+singles
+
+// sky : 2014-06-19 Sky IP International Ltd, a company incorporated in England and Wales, operating via its registered Swiss branch
+sky
+
+// social : 2013-11-07 United TLD Holdco Ltd.
+social
+
+// software : 2014-03-20 undefined
+software
+
 // sohu : 2013-12-19 Sohu.com Limited
 sohu
 
-// BEST : 2013-12-19 BestTLD Pty Ltd
-best
+// solar : 2013-11-07 Ruby Town, LLC
+solar
 
-// country : 2013-12-19 Top Level Domain Holdings Limited
-country
+// solutions : 2013-11-07 Silver Cover, LLC
+solutions
 
-// KRED : 2013-12-19 KredTLD Pty Ltd
-kred
+// soy : 2014-01-23 Charleston Road Registry Inc.
+soy
 
-// feedback : 2013-12-19 Top Level Spectrum, Inc.
-feedback
+// space : 2014-04-03 DotSpace Inc.
+space
 
-// work : 2013-12-19 Top Level Domain Holdings Limited
-work
+// spiegel : 2014-02-05 SPIEGEL-Verlag Rudolf Augstein GmbH & Co. KG
+spiegel
 
-// luxe : 2014-01-09 Top Level Domain Holdings Limited
-luxe
+// supplies : 2013-12-19 Atomic Fields, LLC
+supplies
 
-// ryukyu : 2014-01-09 BusinessRalliart inc.
-ryukyu
+// supply : 2013-12-19 Half Falls, LLC
+supply
 
-// autos : 2014-01-09 DERAutos, LLC
-autos
+// support : 2013-10-24 Grand Orchard, LLC
+support
 
-// homes : 2014-01-09 DERHomes, LLC
-homes
+// surf : 2014-01-09 Top Level Domain Holdings Limited
+surf
 
-// jetzt : 2014-01-09 New TLD Company AB
-jetzt
+// surgery : 2014-03-20 Tin Avenue, LLC
+surgery
 
-// yachts : 2014-01-09 DERYachts, LLC
-yachts
+// suzuki : 2014-02-20 SUZUKI MOTOR CORPORATION
+suzuki
 
-// motorcycles : 2014-01-09 DERMotorcycles, LLC
-motorcycles
+// systems : 2013-11-07 Dash Cypress, LLC
+systems
 
-// mini : 2014-01-09 Bayerische Motoren Werke Aktiengesellschaft
-mini
+// taipei : 2014-07-10 Taipei City Government
+taipei
 
-// ggee : 2014-01-09 GMO Internet, Inc.
-ggee
+// tatar : 2014-04-24 Limited Liability Company \
+tatar
 
-// beer : 2014-01-09 Top Level Domain Holdings Limited
-beer
+// tattoo : 2013-08-30 Uniregistry, Corp.
+tattoo
 
-// xn--1qqw23a : 2014-01-13 Guangzhou YU Wei Information Technology Co., Ltd.
-xn--1qqw23a
+// tax : 2014-03-20 Storm Orchard, LLC
+tax
 
-// college : 2014-01-16 XYZ.COM LLC
-college
+// technology : 2013-09-13 Auburn Falls
+technology
 
-// ovh : 2014-01-16 OVH SAS
-ovh
+// temasek : 2014-08-07 Temasek Holdings (Private) Limited
+temasek
 
-// meet : 2014-01-16 Afilias Limited
-meet
+// tienda : 2013-11-14 Victor Manor, LLC
+tienda
 
-// xn--ses554g : 2014-01-16 HU YI GLOBAL INFORMATION RESOURCES (HOLDING) COMPANY. HONGKONG LIMITED
-xn--ses554g
+// tips : 2013-09-20 Corn Willow, LLC
+tips
+
+// tirol : 2014-04-24 punkt Tirol GmbH
+tirol
+
+// today : 2013-09-20 Pearl Woods, LLC
+today
+
+// tokyo : 2013-11-13 GMO Registry, Inc.
+tokyo
+
+// tools : 2013-11-21 Pioneer North, LLC
+tools
+
+// top : 2014-03-20 Jiangsu Bangning Science & Technology Co.,Ltd.
+top
+
+// toshiba : 2014-04-10 TOSHIBA Corporation
+toshiba
+
+// town : 2014-03-06 Koko Moon, LLC
+town
+
+// toys : 2014-03-06 Pioneer Orchard, LLC
+toys
+
+// trade : 2014-01-23 Elite Registry Limited
+trade
+
+// training : 2013-11-07 Wild Willow, LLC
+training
+
+// tui : 2014-07-03 TUI AG
+tui
 
-// gop : 2014-01-16 Republican State Leadership Committee, Inc.
-gop
+// university : 2014-03-06 Little Station, LLC
+university
 
-// blackfriday : 2014-01-16 Uniregistry, Corp.
-blackfriday
+// uno : 2013-09-11 Dot Latin LLC
+uno
 
-// lacaixa : 2014-01-16 CAIXA D'ESTALVIS I PENSIONS DE BARCELONA
-lacaixa
+// uol : 2014-05-01 UBN INTERNET LTDA.
+uol
 
-// xn--czr694b : 2014-01-16 HU YI GLOBAL INFORMATION RESOURCES(HOLDING) COMPANY.HONGKONG LIMITED
-xn--czr694b
+// vacations : 2013-12-05 Atomic Tigers, LLC
+vacations
 
 // vegas : 2014-01-16 Dot Vegas, Inc.
 vegas
 
-// black : 2014-01-16 Afilias Limited
-black
+// ventures : 2013-08-27 Binky Lake, LLC
+ventures
 
-// soy : 2014-01-23 Charleston Road Registry Inc.
-soy
+// versicherung : 2014-03-20 dotversicherung-registry GmbH
+versicherung
 
-// trade : 2014-01-23 Elite Registry Limited
-trade
+// vet : 2014-03-06 undefined
+vet
 
-// gent : 2014-01-23 COMBELL GROUP NV/SA
-gent
+// viajes : 2013-10-17 Black Madison, LLC
+viajes
 
-// ing : 2014-01-23 Charleston Road Registry Inc.
-ing
+// villas : 2013-12-05 New Sky, LLC
+villas
 
-// dad : 2014-01-23 Charleston Road Registry Inc.
-dad
+// vision : 2013-12-05 Koko Station, LLC
+vision
 
-// shriram : 2014-01-23 Shriram Capital Ltd.
-shriram
+// vlaanderen : 2014-02-06 DNS.be vzw
+vlaanderen
 
-// bayern : 2014-01-23 Bayern Connect GmbH
-bayern
+// vodka : 2013-12-19 Top Level Domain Holdings Limited
+vodka
 
-// scot : 2014-01-23 Dot Scot Registry Limited
-scot
+// vote : 2013-11-21 Monolith Registry LLC
+vote
 
-// webcam : 2014-01-23 dot Webcam Limited
-webcam
+// voting : 2013-11-13 Valuetainment Corp.
+voting
 
-// foo : 2014-01-23 Charleston Road Registry Inc.
-foo
+// voto : 2013-11-21 Monolith Registry LLC
+voto
 
-// eat : 2014-01-23 Charleston Road Registry Inc.
-eat
+// voyage : 2013-08-27 Ruby House, LLC
+voyage
 
-// nyc : 2014-01-23 The City of New York
-nyc
+// wales : 2014-05-08 Nominet UK
+wales
 
-// prod : 2014-01-23 Charleston Road Registry Inc.
-prod
+// wang : 2013-10-24 Zodiac Leo Limited
+wang
 
-// how : 2014-01-23 Charleston Road Registry Inc.
-how
+// watch : 2013-11-14 Sand Shadow, LLC
+watch
 
-// day : 2014-01-30 Charleston Road Registry Inc.
-day
+// webcam : 2014-01-23 dot Webcam Limited
+webcam
 
-// meme : 2014-01-30 Charleston Road Registry Inc.
-meme
+// website : 2014-04-03 DotWebsite Inc.
+website
 
-// mov : 2014-01-30 Charleston Road Registry Inc.
-mov
+// wed : 2013-10-01 Atgron, Inc.
+wed
 
-// paris : 2014-01-30 City of Paris
-paris
+// wedding : 2014-04-24 Top Level Domain Holdings Limited
+wedding
 
-// boo : 2014-01-30 Charleston Road Registry Inc.
-boo
+// whoswho : 2014-02-20 Who's Who Registry
+whoswho
 
-// new : 2014-01-30 Charleston Road Registry Inc.
-new
+// wien : 2013-10-28 punkt.wien GmbH
+wien
 
-// ifm : 2014-01-30 ifm electronic gmbh
-ifm
+// wiki : 2013-11-07 Top Level Design, LLC
+wiki
 
-// life : 2014-02-06 Trixy Oaks, LLC
-life
+// williamhill : 2014-03-13 William Hill Organization Limited
+williamhill
 
-// archi : 2014-02-06 STARTING DOT LIMITED
-archi
+// wme : 2014-02-13 William Morris Endeavor Entertainment, LLC
+wme
 
-// spiegel : 2014-02-06 SPIEGEL-Verlag Rudolf Augstein GmbH & Co. KG
-spiegel
+// work : 2013-12-19 Top Level Domain Holdings Limited
+work
 
-// brussels : 2014-02-06 DNS.be vzw
-brussels
+// works : 2013-11-14 Little Dynamite, LLC
+works
 
-// church : 2014-02-06 Holly Fileds, LLC
-church
+// world : 2014-06-12 Bitter Fields, LLC
+world
 
-// here : 2014-02-06 Charleston Road Registry Inc.
-here
+// wtc : 2013-12-19 World Trade Centers Association, Inc.
+wtc
 
-// dabur : 2014-02-06 Dabur India Limited
-dabur
+// wtf : 2014-03-06 Hidden Way, LLC
+wtf
 
-// vlaanderen : 2014-02-06 DNS.be vzw
-vlaanderen
+// xn--1qqw23a : 2014-01-09 Guangzhou YU Wei Information Technology Co., Ltd.
+xn--1qqw23a
 
-// cologne : 2014-02-06 NetCologne Gesellschaft für Telekommunikation mbH
-cologne
+// xn--30rr7y : 2014-06-12 Excellent First Limited
+xn--30rr7y
 
-// xn--kput3i : 2014-02-13 Beijing RITT-Net Technology Development Co., Ltd
-xn--kput3i
+// xn--3bst00m : 2013-09-13 Eagle Horizon Limited
+xn--3bst00m
 
-// wme : 2014-02-13 William Morris Endeavor Entertainment, LLC
-wme
+// xn--3ds443g : 2013-09-08 TLD REGISTRY LIMITED
+xn--3ds443g
 
-// nhk : 2014-02-13 Japan Broadcasting Corporation (NHK)
-nhk
+// xn--45q11c : 2013-11-21 Zodiac Scorpio Limited
+xn--45q11c
 
-// suzuki : 2014-02-20 SUZUKI MOTOR CORPORATION
-suzuki
+// xn--4gbrim : 2013-10-04 Suhub Electronic Establishment
+xn--4gbrim
 
-// whoswho : 2014-02-20 Who's Who Registry
-whoswho
+// xn--55qw42g : 2013-11-08 China Organizational Name Administration Center
+xn--55qw42g
 
-// scb : 2014-02-20 The Siam Commercial Bank Public Company Limited ("SCB""\)
-scb
+// xn--55qx5d : 2013-11-14 Computer Network Information Center of Chinese Academy of Sciences (China Internet Network Information Center)
+xn--55qx5d
 
-// hamburg : 2014-02-20 Hamburg Top-Level-Domain GmbH
-hamburg
+// xn--6frz82g : 2013-09-23 Afilias Limited
+xn--6frz82g
 
-// services : 2014-02-27 Fox Castle, LLC
-services
+// xn--6qq986b3xl : 2013-09-13 Tycoon Treasure Limited
+xn--6qq986b3xl
 
-// bzh : 2014-02-27 Association www.bzh
-bzh
+// xn--80adxhks : 2013-12-19 Foundation for Assistance for Internet Technologies and Infrastructure Development (FAITID)
+xn--80adxhks
 
-// rio : 2014-02-27 Empresa Municipal de Informática SA - IPLANRIO
-rio
+// xn--80asehdb : 2013-07-14 CORE Association
+xn--80asehdb
 
-// cash : 2014-03-07 Delta Lake, LLC
-cash
+// xn--80aswg : 2013-07-14 CORE Association
+xn--80aswg
 
-// gives : 2014-03-07 United TLD Holdco Ltd.
-gives
+// xn--9et52u : 2014-06-12 RISE VICTORY LIMITED
+xn--9et52u
 
-// hiphop : 2014-03-07 Uniregistry, Corp.
-hiphop
+// xn--b4w605ferd : 2014-08-07 Temasek Holdings (Private) Limited
+xn--b4w605ferd
 
-// degree : 2014-03-07 Puff House, LLC
-degree
+// xn--c1avg : 2013-11-14 Public Interest Registry
+xn--c1avg
 
-// digital : 2014-03-07 Dash Park, LLC
-digital
+// xn--cg4bki : 2013-09-27 SAMSUNG SDS CO., LTD
+xn--cg4bki
 
-// rehab : 2014-03-07 United TLD Holdco Ltd.
-rehab
+// xn--czr694b : 2014-01-16 HU YI GLOBAL INFORMATION RESOURCES(HOLDING) COMPANY.HONGKONG LIMITED
+xn--czr694b
 
-// wtf : 2014-03-07 Hidden Way, LLC
-wtf
+// xn--czrs0t : 2013-12-19 Wild Island, LLC
+xn--czrs0t
 
-// financial : 2014-03-07 Just Cover, LLC
-financial
+// xn--czru2d : 2013-11-21 Zodiac Capricorn Limited
+xn--czru2d
 
-// limited : 2014-03-07 Big Fest, LLC
-limited
+// xn--d1acj3b : 2013-11-20 The Foundation for Network Initiatives “The Smart Internet”
+xn--d1acj3b
 
-// discount : 2014-03-07 Holly Hill, LLC
-discount
+// xn--efvy88h : 2014-08-22 Xinhua News Agency Guangdong Branch 新华通讯社广东分社
+xn--efvy88h
 
-// fail : 2014-03-07 Atomic Pipe, LLC
-fail
+// xn--fiq228c5hs : 2013-09-08 TLD REGISTRY LIMITED
+xn--fiq228c5hs
 
-// vet : 2014-03-07 Wild Dale, LLC
-vet
+// xn--fiq64b : 2013-10-14 CITIC Group Corporation
+xn--fiq64b
 
-// ngo : 2014-03-07 Public Interest Registry
-ngo
+// xn--fjq720a : 2014-05-22 Will Bloom, LLC
+xn--fjq720a
 
-// fitness : 2014-03-07 Brice Orchard, LLC
-fitness
+// xn--flw351e : 2014-07-31 Charleston Road Registry Inc.
+xn--flw351e
 
-// schule : 2014-03-07 Outer Moon, LLC
-schule
+// xn--hxt814e : 2014-05-15 Zodiac Libra Limited
+xn--hxt814e
 
-// navy : 2014-03-07 United TLD Holdco Ltd.
-navy
+// xn--i1b6b1a6a2e : 2013-11-14 Public Interest Registry
+xn--i1b6b1a6a2e
 
-// bio : 2014-03-07 STARTING DOT LIMITED
-bio
+// xn--io0a7i : 2013-11-14 Computer Network Information Center of Chinese Academy of Sciences (China Internet Network Information Center)
+xn--io0a7i
 
-// ong : 2014-03-07 Public Interest Registry
-ong
+// xn--kput3i : 2014-02-13 Beijing RITT-Net Technology Development Co., Ltd
+xn--kput3i
 
-// town : 2014-03-07 Koko Moon, LLC
-town
+// xn--mgbab2bd : 2013-10-31 CORE Association
+xn--mgbab2bd
 
-// toys : 2014-03-07 Pioneer Orchard, LLC
-toys
+// xn--mxtq1m : 2014-03-06 Net-Chinese Co., Ltd.
+xn--mxtq1m
 
-// army : 2014-03-07 United TLD Holdco Ltd.
-army
+// xn--ngbc5azd : 2013-07-13 International Domain Registry Pty. Ltd.
+xn--ngbc5azd
 
-// engineering : 2014-03-07 Romeo Canyon
-engineering
+// xn--nqv7f : 2013-11-14 Public Interest Registry
+xn--nqv7f
 
-// capital : 2014-03-07 Delta Mill, LLC
-capital
+// xn--nqv7fs00ema : 2013-11-14 Public Interest Registry
+xn--nqv7fs00ema
 
-// exchange : 2014-03-07 Spring Falls, LLC
-exchange
+// xn--p1acf : 2013-12-12 Rusnames Limited
+xn--p1acf
 
-// fan : 2014-03-07 Goose Glen, LLC
-fan
+// xn--q9jyb4c : 2013-09-17 Charleston Road Registry Inc.
+xn--q9jyb4c
 
-// market : 2014-03-07 Victor Way, LLC
-market
+// xn--qcka1pmc : 2014-07-31 Charleston Road Registry Inc.
+xn--qcka1pmc
 
-// media : 2014-03-07 Grand Glen, LLC
-media
+// xn--rhqv96g : 2013-09-11 Stable Tone Limited
+xn--rhqv96g
 
-// lease : 2014-03-07 Victor Trail, LLC
-lease
+// xn--ses554g : 2014-01-16 HU YI GLOBAL INFORMATION RESOURCES (HOLDING) COMPANY. HONGKONG LIMITED
+xn--ses554g
 
-// university : 2014-03-07 Little Station, LLC
-university
+// xn--unup4y : 2013-07-14 Spring Fields, LLC
+xn--unup4y
 
-// reisen : 2014-03-07 New Cypress, LLC
-reisen
+// xn--vermgensberater-ctb : 2014-06-23 Deutsche Vermögensberatung Aktiengesellschaft DVAG
+xn--vermgensberater-ctb
 
-// airforce : 2014-03-07 United TLD Holdco Ltd.
-airforce
+// xn--vermgensberatung-pwb : 2014-06-23 Deutsche Vermögensberatung Aktiengesellschaft DVAG
+xn--vermgensberatung-pwb
 
-// pictures : 2014-03-07 Foggy Sky, LLC
-pictures
+// xn--vhquv : 2013-08-27 Dash McCook, LLC
+xn--vhquv
 
-// gripe : 2014-03-07 Corn Sunset, LLC
-gripe
+// xn--xhq521b : 2013-11-14 Guangzhou YU Wei Information Technology Co., Ltd.
+xn--xhq521b
 
-// engineering : 2014-03-07 United TLD Holdco Ltd.
-engineering
+// xn--zfr164b : 2013-11-08 China Organizational Name Administration Center
+xn--zfr164b
 
-// associates : 2014-03-07 Baxter Hill, LLC
-associates
+// xyz : 2013-12-05 XYZ.COM LLC
+xyz
 
-// xn--mxtq1m : 2014-03-07 Net-Chinese Co., Ltd.
-xn--mxtq1m
+// yachts : 2014-01-09 DERYachts, LLC
+yachts
 
-// williamhill : 2014-03-13 William Hill Organization Limited
-williamhill
+// yandex : 2014-04-10 YANDEX, LLC
+yandex
 
-// hiv : 2014-03-13 dotHIV gemeinnuetziger e.V.
-hiv
+// yoga : 2014-05-29 Top Level Domain Holdings Limited
+yoga
 
-// sca : 2014-03-13 SVENSKA CELLULOSA AKTIEBOLAGET SCA (publ)
-sca
+// yokohama : 2013-12-12 GMO Registry, Inc.
+yokohama
 
-// reise : 2014-03-13 dotreise GmbH
-reise
+// youtube : 2014-05-01 Charleston Road Registry Inc.
+youtube
+
+// zip : 2014-05-08 Charleston Road Registry Inc.
+zip
 
+// zone : 2013-11-14 Outer Falls, LLC
+zone
 
 // ===END ICANN DOMAINS===
 // ===BEGIN PRIVATE DOMAINS===
@@ -8004,20 +8613,22 @@ reise
 cloudfront.net
 
 // Amazon Elastic Compute Cloud: https://aws.amazon.com/ec2/
-// Submitted by Osman Surkatty <osmans@amazon.com> 2013-04-02
-compute.amazonaws.com
-us-east-1.amazonaws.com
-compute-1.amazonaws.com
-z-1.compute-1.amazonaws.com
-z-2.compute-1.amazonaws.com
+// Submitted by Osman Surkatty <osmans@amazon.com> 2014-05-20
 ap-northeast-1.compute.amazonaws.com
 ap-southeast-1.compute.amazonaws.com
 ap-southeast-2.compute.amazonaws.com
+cn-north-1.compute.amazonaws.cn
+compute.amazonaws.cn
+compute.amazonaws.com
+compute-1.amazonaws.com
 eu-west-1.compute.amazonaws.com
 sa-east-1.compute.amazonaws.com
+us-east-1.amazonaws.com
 us-gov-west-1.compute.amazonaws.com
 us-west-1.compute.amazonaws.com
 us-west-2.compute.amazonaws.com
+z-1.compute-1.amazonaws.com
+z-2.compute-1.amazonaws.com
 
 // Amazon Elastic Beanstalk : https://aws.amazon.com/elasticbeanstalk/
 // Submitted by Adam Stein <astein@amazon.com> 2013-04-02
@@ -8060,6 +8671,7 @@ ar.com
 br.com
 cn.com
 com.de
+com.se
 de.com
 eu.com
 gb.com
@@ -8415,6 +9027,14 @@ global.ssl.fastly.net
 a.prod.fastly.net
 global.prod.fastly.net
 
+// Firebase, Inc.
+// Submitted by Chris Raynor <chris@firebase.com> 2014-01-21
+firebaseapp.com
+
+// Flynn : https://flynn.io
+// Submitted by Jonathan Rudenberg <jonathan@flynn.io> 2014-07-12
+flynnhub.com
+
 // GitHub, Inc.
 // Submitted by Ben Toews <btoews@github.com> 2014-02-06
 github.io
@@ -8494,10 +9114,18 @@ azurewebsites.net
 azure-mobile.net
 cloudapp.net
 
+// NFSN, Inc. : https://www.NearlyFreeSpeech.NET/
+// Submitted by Jeff Wheelhouse <support@nearlyfreespeech.net> 2014-02-02
+nfshost.com
+
 // NYC.mn : http://www.information.nyc.mn
 // Submitted by Matthew Brown <mattbrown@nyc.mn> 2013-03-11
 nyc.mn
 
+// One Fold Media : http://www.onefoldmedia.com/
+// Submitted by Eddie Jones <eddie@onefoldmedia.com> 2014-06-10
+nid.io
+
 // Opera Software, A.S.A.
 // Submitted by Yngve Pettersen <yngve@opera.com> 2009-11-26
 operaunite.com
@@ -8510,10 +9138,18 @@ outsystemscloud.com
 // Submitted by Tim Kramer <tkramer@rhcloud.com> 2012-10-24
 rhcloud.com
 
+// GDS : https://www.gov.uk/service-manual/operations/operating-servicegovuk-subdomains
+// Submitted by David Illsley <david.illsley@digital.cabinet-office.gov.uk> 2014-08-28
+service.gov.uk
+
 // priv.at : http://www.nic.priv.at/
 // Submitted by registry <lendl@nic.at> 2008-06-09
 priv.at
 
+// Yola : https://www.yola.com/
+// Submitted by Stefano Rivera <stefano@yola.com> 2014-07-09
+yolasite.com
+
 // ZaNiC : http://www.za.net/
 // Submitted by registry <hostmaster@nic.za.net> 2009-10-03
 za.net
@@ -4,7 +4,10 @@ use strict;
 use warnings;
 use Carp 'croak';
 use Net::SSLeay;
-use Exporter 'import';
+
+# old versions of Exporter do not export 'import' yet
+require Exporter;
+*import = \&Exporter::import;
 
 our $VERSION = '0.03';
 our @EXPORT = qw(
@@ -13,7 +13,7 @@
 
 package IO::Socket::SSL;
 
-our $VERSION = '1.998';
+our $VERSION = '2.002';
 
 use IO::Socket;
 use Net::SSLeay 1.46;
@@ -83,7 +83,7 @@ my $algo2digest = do {
 # global defaults
 my %DEFAULT_SSL_ARGS = (
     SSL_check_crl => 0,
-    SSL_version => 'SSLv23:!SSLv2',
+    SSL_version => 'SSLv23:!SSLv3:!SSLv2', # consider both SSL3.0 and SSL2.0 as broken
     SSL_verify_callback => undef,
     SSL_verifycn_scheme => undef,  # fallback cn verification
     SSL_verifycn_publicsuffix => undef,  # fallback default list verification
@@ -265,7 +265,10 @@ BEGIN {
     if ( $ip6 ) {
 	# if we have IO::Socket::IP >= 0.20 we will use this in preference
 	# because it can handle both IPv4 and IPv6
-	if ( eval { require IO::Socket::IP; IO::Socket::IP->VERSION(0.20); } ) {
+	if ( eval { 
+	    require IO::Socket::IP; 
+	    IO::Socket::IP->VERSION(0.20) && IO::Socket::IP->VERSION != 0.30; 
+	}) {
 	    @ISA = qw(IO::Socket::IP);
 	    constant->import( CAN_IPV6 => "IO::Socket::IP" );
 	    $IOCLASS = "IO::Socket::IP";
@@ -592,13 +595,13 @@ sub connect_SSL {
 	    $DEBUG>=2 && DEBUG("not using SNI because openssl is too old");
 	}
 
-	$arg_hash->{PeerAddr} || $self->_update_peer;
+	$arg_hash->{PeerAddr} || $arg_hash->{PeerHost} || $self->_update_peer;
 	if ( $ctx->{verify_name_ref} ) {
 	    # need target name for update
 	    my $host = $arg_hash->{SSL_verifycn_name}
 		|| $arg_hash->{SSL_hostname};
 	    if ( ! defined $host ) {
-		if ( $host = $arg_hash->{PeerHost} || $arg_hash->{PeerAddr} ) {
+		if ( $host = $arg_hash->{PeerAddr} || $arg_hash->{PeerHost} ) {
 		    $host =~s{:[a-zA-Z0-9_\-]+$}{};
 		}
 	    }
@@ -620,7 +623,10 @@ sub connect_SSL {
 
 	my $session = $ctx->session_cache( $arg_hash->{SSL_session_key} ?
 	    ( $arg_hash->{SSL_session_key},1 ) :
-	    ( $arg_hash->{PeerAddr}, $arg_hash->{PeerPort} )
+	    ( 
+		$arg_hash->{PeerAddr} || $arg_hash->{PeerHost}, 
+		$arg_hash->{PeerPort} || $arg_hash->{PeerService}
+	    )
 	);
 	Net::SSLeay::set_session($ssl, $session) if ($session);
     }
@@ -733,10 +739,13 @@ sub connect_SSL {
     if ( $ctx->has_session_cache
 	and my $session = Net::SSLeay::get1_session($ssl)) {
 	my $arg_hash = ${*$self}{'_SSL_arguments'};
-	$arg_hash->{PeerAddr} || $self->_update_peer;
+	$arg_hash->{PeerAddr} || $arg_hash->{PeerHost} || $self->_update_peer;
 	$ctx->session_cache( $arg_hash->{SSL_session_key} ?
 	    ( $arg_hash->{SSL_session_key},1 ) :
-	    ( $arg_hash->{PeerAddr},$arg_hash->{PeerPort} ),
+	    ( 
+		$arg_hash->{PeerAddr} || $arg_hash->{PeerHost},
+		$arg_hash->{PeerPort} || $arg_hash->{PeerService}
+	    ),
 	    $session
 	);
     }
@@ -1559,8 +1568,10 @@ if ( defined &Net::SSLeay::get_peer_cert_chain
 	if ( CAN_IPV6 and $identity =~m{:} ) {
 	    # no IPv4 or hostname have ':'  in it, try IPv6.
 	    $ipn = inet_pton(AF_INET6,$identity) or return; # invalid name
-	} elsif ( $identity =~m{^\d[\d\.]*\.\d+$} ) {
-	    $ipn = inet_aton($identity) or return; # invalid name
+	} elsif ( my @ip = $identity =~m{^(\d+)(?:\.(\d+)\.(\d+)\.(\d+)|[\d\.]*)$} ) {
+	    # check for invalid IP/hostname
+	    return if 4 != @ip or 4 != grep { defined($_) && $_<256 } @ip; 
+	    $ipn = pack("CCCC",@ip);
 	} else {
 	    # assume hostname, check for umlauts etc
 	    if ( $identity =~m{[^a-zA-Z0-9_.\-]} ) {
@@ -2082,6 +2093,8 @@ WARN
     }
 
     my $ssl_op = Net::SSLeay::OP_ALL();
+    $ssl_op |= &Net::SSLeay::OP_SINGLE_DH_USE;
+    $ssl_op |= &Net::SSLeay::OP_SINGLE_ECDH_USE if $can_ecdh;
 
     my $ver;
     for (split(/\s*:\s*/,$arg_hash->{SSL_version})) {
@@ -640,8 +640,10 @@ series, but only with 1.0 a bug was fixed when the server could not decide about
 its hostname. Therefore client side SNI is only supported with OpenSSL 1.0 or
 higher in IO::Socket::SSL.
 With a supported version, SNI is used automatically on the client side, if it
-can determine the hostname from C<PeerAddr> or C<PeerHost>. On unsupported
-OpenSSL versions it will silently not use SNI.
+can determine the hostname from C<PeerAddr> or C<PeerHost> (which are synonyms
+in the underlying IO::Socket:: classes and thus should never be set both or at
+least not to different values).
+On unsupported OpenSSL versions it will silently not use SNI.
 The hostname can also be given explicitly given with C<SSL_hostname>, but in
 this case it will throw in error, if SNI is not supported.
 To check for support you might call C<IO::Socket::SSL->can_client_sni()>.
@@ -902,24 +904,29 @@ For convenience it is also set if it was not given but a cert was given for use
 =item SSL_version
 
 Sets the version of the SSL protocol used to transmit data.
-'SSLv23' auto-negotiates between SSLv2 and SSLv3, while 'SSLv2', 'SSLv3',
-'TLSv1', 'TLSv1_1' or 'TLSv1_2' restrict the protocol to the specified version.
+'SSLv23' uses a handshake compatible with SSL2.0, SSL3.0 and TLS1.x, while
+'SSLv2', 'SSLv3', 'TLSv1', 'TLSv1_1' or 'TLSv1_2' restrict handshake and
+protocol to the specified version.
 All values are case-insensitive.  Instead of 'TLSv1_1' and 'TLSv1_2' one can
 also use 'TLSv11' and 'TLSv12'.  Support for 'TLSv1_1' and 'TLSv1_2' requires
 recent versions of Net::SSLeay and openssl.
 
-You can limit to set of supported protocols by adding !version separated by ':'.
+Independend from the handshake format you can limit to set of accepted SSL
+versions by adding !version separated by ':'.
 
-The default SSL_version is 'SSLv23:!SSLv2' which means, that SSLv2, SSLv3 and
-TLSv1 are supported for initial protocol handshakes, but SSLv2 will not be
-accepted, leaving only SSLv3 and TLSv1. You can also use !TLSv1_1 and !TLSv1_2
-to disable TLS versions 1.1 and 1.2 while allowing TLS version 1.0.
+The default SSL_version is 'SSLv23:!SSLv3:!SSLv2' which means, that the
+handshake format is compatible to SSL2.0 and higher, but that the successful
+handshake is limited to TLS1.0 and higher, that is no SSL2.0 or SSL3.0 because
+both of these versions have serious security issues and should not be used
+anymore.
+You can also use !TLSv1_1 and !TLSv1_2 to disable TLS versions 1.1 and 1.2 while
+still allowing TLS version 1.0.
 
-Setting the version instead to 'TLSv1' will probably break interaction with
-lots of clients which start with SSLv2 and then upgrade to TLSv1. On the other
+Setting the version instead to 'TLSv1' might break interaction with older
+clients, which need and SSL2.0 compatible handshake. On the other
 side some clients just close the connection when they receive a TLS version 1.1
-request. In this case setting the version to 'SSLv23:!SSLv2:!TLSv1_1:!TLSv1_2'
-might help.
+request. In this case setting the version to
+'SSLv23:!SSLv2:!SSLv3:!TLSv1_1:!TLSv1_2' might help.
 
 =item SSL_cipher_list
 
@@ -5,11 +5,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 $|=1;
 print "1..30\n";
@@ -3,9 +3,7 @@ use warnings;
 use Test::More;
 use IO::Socket::SSL;
 use File::Temp 'tempfile';
-
-plan skip_all => "fork not implemented on this platform"
-    if grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos );
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 my $srv = IO::Socket::INET->new(
     LocalAddr => '127.0.0.1',
@@ -16,11 +16,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 $|=1;
 print "1..9\n";
@@ -6,16 +6,10 @@ use strict;
 use warnings;
 use IO::Socket::SSL;
 use Socket;
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 $|=1;
 
-foreach ($^O) {
-    if (/MacOS/ or /VOS/ or /vmesa/ or /riscos/ or /amigaos/) {
-	print "1..0 # Skipped: fork not implemented on this platform\n";
-	exit;
-    }
-}
-
 $SIG{'CHLD'} = "IGNORE";
 
 print "1..9\n";
@@ -1,7 +1,6 @@
 use strict;
 use warnings;
 use IO::Socket::SSL;
-
 do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 $|=1;
@@ -8,14 +8,9 @@ use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
 use Errno 'EAGAIN';
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 $|=1;
-foreach ($^O) {
-    if (/MacOS/ or /VOS/ or /vmesa/ or /riscos/ or /amigaos/) {
-	print "1..0 # Skipped: fork not implemented on this platform\n";
-	exit;
-    }
-}
 
 my $CAN_NONBLOCK = $^O =~m{mswin32}i ? 0 : eval "use 5.006; use IO::Select; 1";
 my $CAN_PEEK = &Net::SSLeay::OPENSSL_VERSION_NUMBER >= 0x0090601f;
@@ -13,12 +13,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 $|=1;
 print "1..3\n";
@@ -7,11 +7,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 if ( ! IO::Socket::SSL->can_ecdh ) {
     print "1..0 # Skipped: no support for ecdh with this openssl/Net::SSLeay\n";
@@ -14,14 +14,14 @@ my @tests = (
 	# this should give us OCSP stapling
 	host => 'www.live.com',
 	port => 443,
-	fingerprint => 'sha1$10c56ee9e2acaf2e77caeb7072bf6522dd7422b8',
+	fingerprint => 'sha1$69e85345bfa05c1beb1352dad0b8c61abe42f26c',
 	ocsp_staple => 1,
     },
     {
 	# no OCSP stapling yet
 	host => 'www.google.com',
 	port => 443,
-	fingerprint => 'sha1$007a5ab302f14446e2ea24d3a829de22ba1bf950',
+	fingerprint => 'sha1$93125bb97d02aa4536b4ec9a7ca01ad8927314db',
     },
     {
 	# this is revoked
@@ -13,13 +13,13 @@ for( qw( IO::Socket::IP IO::Socket::INET6  )) {
 
 # host:port fingerprint_cert subject_hash_ca
 my @tests = qw(
-    www.google.com:443 sha1$c0019e434cc04dc9086a6e63c8ecf74781e4f4a0 578d5c04
-    www.yahoo.com:443 sha1$6b52651caf7b1f306050179d27570d4d5c5bfd24 415660c1
-    www.comdirect.de:443 sha1$0d9626705b9984b19bca19f8ceb18885b103d0e9 415660c1
-    meine.deutsche-bank.de:443 sha1$ba54c47dd5493db54cd0f76a120cac11cdfb76f8 415660c1
-    www.twitter.com:443 sha1$813fd89d264cc9a5bb650d0b2d2bb0d63259bcaa b204d74a
-    www.facebook.com:443 sha1$bd012a89b2cc9e49f81f47bfbd52de48a04ed3ab 244b5494
-    www.live.com:443 sha1$10c56ee9e2acaf2e77caeb7072bf6522dd7422b8 415660c1
+    www.google.com:443 sha1$93125bb97d02aa4536b4ec9a7ca01ad8927314db 578d5c04
+    www.yahoo.com:443 sha1$71167492535fbdaa3ab6fec242ce183930d27603 415660c1
+    www.comdirect.de:443 sha1$ca16159c49de301ab1ae69ef1d3c0205f54ebaaa 415660c1
+    meine.deutsche-bank.de:443 sha1$1331596b6ecfe54f2018b6d16046c7046dc84048 415660c1
+    www.twitter.com:443 sha1$add53f6680fe66e383cbac3e60922e3b4c412bed b204d74a
+    www.facebook.com:443 sha1$45bfee628eec0ba06dfb860c865ffdb71502a541 244b5494
+    www.live.com:443 sha1$69e85345bfa05c1beb1352dad0b8c61abe42f26c b204d74a
 );
 
 
@@ -14,11 +14,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 # check first if we have loaded IO::Socket::IP, as if so we won't need or use
 # IO::Socket::INET6
@@ -10,12 +10,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 # check if we have loaded IO::Socket::IP, IO::Socket::SSL should do it by
 # itself if it is available
@@ -9,6 +9,7 @@ use Socket;
 use IO::Socket::SSL;
 use IO::Select;
 use Errno qw(EAGAIN EINPROGRESS );
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 if ( grep { $^O =~m{$_}i } qw( MacOS VOS vmesa riscos amigaos mswin32) ) {
     print "1..0 # Skipped: ps not implemented on this platform\n";
@@ -6,11 +6,7 @@ use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
 use IO::Socket::SSL::Intercept;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 print "1..8\n";
 
@@ -10,19 +10,18 @@ use Socket;
 use IO::Socket::SSL;
 use IO::Select;
 use Errno qw( EAGAIN EINPROGRESS EPIPE ECONNRESET );
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 if ( ! eval "use 5.006; use IO::Select; return 1" ) {
     print "1..0 # Skipped: no support for nonblocking sockets\n";
     exit;
 }
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+
+
 
 if ( $^O =~m{mswin32}i ) {
-	print "1..0 # Skipped: nonblocking does not work on Win32\n";
-	exit
+    print "1..0 # Skipped: nonblocking does not work on Win32\n";
+    exit
 }
 
 $SIG{PIPE} = 'IGNORE'; # use EPIPE not signal handler
@@ -7,11 +7,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 # check if we have NPN available
 # if it is available
@@ -3,10 +3,7 @@ use warnings;
 use IO::Socket::SSL;
 use IO::Socket::SSL::Utils;
 use Test::More;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    plan skip_all => "fork not implemented on this platform";
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 # create listener
 IO::Socket::SSL::default_ca('certs/my-ca.pem');
@@ -3,10 +3,7 @@ use warnings;
 use IO::Socket::SSL;
 use IO::Socket::SSL::Utils;
 use Test::More;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    plan skip_all => "fork not implemented on this platform";
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 my @tests = qw(
     fail:com|*
@@ -14,6 +11,8 @@ my @tests = qw(
     fail:googleapis.com|*.com
     ok:googleapis.com|googleapis.com
     ok:ajax.googleapis.com|*.googleapis.com
+    ok:s3.amazonaws.com|s3.amazonaws.com
+    ok:foo.s3.amazonaws.com|*.s3.amazonaws.com
     fail:google.com|*.com
     ok:google.com|google.com
     ok:www.google.com|*.google.com
@@ -16,11 +16,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 my @tests;
 push @tests, [
@@ -7,14 +7,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-
-foreach ($^O) {
-    if (/MacOS/ or /VOS/ or /vmesa/ or /riscos/ or /amigaos/) {
-	print "1..0 # Skipped: fork not implemented on this platform\n";
-	exit;
-    }
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 $|=1;
 my $numtests = 35;
@@ -5,11 +5,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 if ( $^O =~m{mswin32}i ) {
     print "1..0 # Skipped: signals not relevant on this platform\n";
@@ -5,11 +5,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 if ( ! IO::Socket::SSL->can_server_sni() ) {
     print "1..0 # skipped because no server side SNI support - openssl/Net::SSleay too old\n";
@@ -5,11 +5,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 if ( ! IO::Socket::SSL->can_server_sni() ) {
     print "1..0 # skipped because no server side SNI support - openssl/Net::SSleay too old\n";
@@ -4,11 +4,7 @@ use strict;
 use warnings;
 use IO::Socket::INET;
 use IO::Socket::SSL;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 $|=1;
 my @tests = qw( start stop start close );
@@ -7,11 +7,7 @@ use Socket;
 use IO::Socket::SSL;
 use IO::Select;
 use Errno qw(EAGAIN EINPROGRESS );
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 $|=1;
 print "1..9\n";
@@ -9,15 +9,12 @@ use Socket;
 use IO::Socket::SSL;
 use IO::Select;
 use Errno qw(EAGAIN EINPROGRESS );
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 if ( ! eval "use 5.006; use IO::Select; return 1" ) {
     print "1..0 # Skipped: no support for nonblocking sockets\n";
     exit;
 }
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
 
 $|=1;
 print "1..9\n";
@@ -11,11 +11,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 $|=1;
 print "1..9\n";
@@ -2,6 +2,7 @@ use strict;
 use warnings;
 use IO::Socket;
 use IO::Socket::SSL;
+use Config;
 
 ############################################################################
 #
@@ -10,7 +11,10 @@ use IO::Socket::SSL;
 #
 ############################################################################
 
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
+unless ( $Config::Config{d_fork} || $Config::Config{d_pseudofork} ||
+        (($^O eq 'MSWin32' || $^O eq 'NetWare') and
+         $Config::Config{useithreads} and
+         $Config::Config{ccflags} =~ /-DPERL_IMPLICIT_SYS/) ) {
     print "1..0 # Skipped: fork not implemented on this platform\n";
     exit
 }
@@ -4,10 +4,9 @@ use Test::More;
 use IO::Socket::SSL;
 use IO::Socket::SSL::Utils;
 use File::Temp 'tempfile';
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 plan tests => 12;
-plan skip_all => "fork not implemented on this platform"
-    if $^O =~m{MacOS|VOS|vmesa|riscos|amigaos};
 
 my ($ca1,$cakey1) = CERT_create( CA => 1, subject => { CN => 'ca1' });
 my ($cert1,$key1) = CERT_create( 
@@ -5,11 +5,7 @@ use warnings;
 use Net::SSLeay;
 use Socket;
 use IO::Socket::SSL;
-
-if ( grep { $^O =~m{$_} } qw( MacOS VOS vmesa riscos amigaos ) ) {
-    print "1..0 # Skipped: fork not implemented on this platform\n";
-    exit
-}
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
 
 # if we have an IDN library max the IDN tests too
 my $can_idn  = eval { require Encode } && (
@@ -27,6 +27,7 @@ my $capath;
 my $all_ciphers;
 my $show_chain;
 my $dump_chain;
+my %conf;
 GetOptions(
     'h|help' => sub { usage() },
     'v|verbose:1' => \$verbose,
@@ -40,7 +41,10 @@ GetOptions(
 	($stls,$stls_arg) = $_[1] =~m{^(\w+)(?::(.*))?$};
 	usage("invalid starttls $stls") if ! $starttls{$stls};
     },
-);
+    'cert=s' => \$conf{SSL_cert_file},
+    'key=s'  => \$conf{SSL_key_file},
+    'name=s' => \$conf{SSL_hostname},
+) or usage("bad usage");
 @ARGV or usage("no hosts given");
 my %default_ca =
     ! $capath ? () :
@@ -50,6 +54,12 @@ my %default_ca =
 die "need Net::SSLeay>=1.58 for showing chain" if $show_chain
     && ! defined &IO::Socket::SSL::peer_certificates;
 
+$conf{SSL_verifycn_name} ||= $conf{SSL_hostname} if $conf{SSL_hostname};
+if ($conf{SSL_cert_file}) {
+    $conf{SSL_key_file} ||= $conf{SSL_cert_file};
+    $conf{SSL_use_cert} = 1;
+}
+
 
 sub usage {
     print STDERR "ERROR: @_\n" if @_;
@@ -59,15 +69,25 @@ Analyze SSL connectivity for problems.
 Usage: $0 [options] (host|host:port)+
 Options:
   -h|--help              - this screen
-  -v|--verbose level     - verbose output
   -d|--debug level       - IO::Socket::SSL/Net::SSLeay debugging
+
+  # how to connect
+  --starttls proto[:arg] - start plain and upgrade to SSL with starttls protocol
+			   (imap,smtp,http_upgrade,http_proxy,pop,ftp,postgresql)
+  -T|--timeout T         - use timeout (default 10)
+
+  # SSL specific settings
   --CApath file|dir      - use given dir|file instead of system default CA store
+  --cert cert            - use given certificate for client authentication
+  --key  key             - use given key for client authentication (default: cert)
+  --name name            - use given name as server name in verification and SNI 
+                           instead of host (useful if target is given as IP)
+
+  # what to show
+  -v|--verbose level     - verbose output
   --all-ciphers          - find out all supported ciphers
   --show-chain           - show certificate chain
   --dump_chain           - dump certificate chain, e.g. all certificates as PEM
-  --starttls proto[:arg] - start plain and upgrade to SSL with starttls protocol
-			   (imap,smtp,http_upgrade,http_proxy,pop,ftp,postgresql)
-  -T|--timeout T         - use timeout (default 10)
 
 Examples:
 
@@ -92,7 +112,7 @@ for my $host (@ARGV) {
 	$ip = $host;
 	$host = undef;
     }
-    push @tests, [ $host||$ip,$port,$host,$st->[1],$st->[2] || 'default' ];
+    push @tests, [ $host||$ip,$port,$conf{SSL_hostname}||$host,$st->[1],$st->[2] || 'default' ];
 }
 
 my $ioclass = IO::Socket::SSL->can_ipv6 || 'IO::Socket::INET';
@@ -125,9 +145,12 @@ for my $test (@tests) {
 
     my @problems;
 
-    # basic connects without verification or any TLS extensions (SNI, OCSP)
-    # find out usable version and ciphers
+    # basic connects without verification or any TLS extensions (OCSP)
+    # find out usable version and ciphers. Because some hosts (like cloudflare)
+    # behave differently if SNI is used we try to use it and only fall back if
+    # it fails.
     my ($use_version,$version,$cipher);
+    my $sni = $name;
     BASE: for my $v (qw(
 	SSLv23:!TLSv1_2:!TLSv1_1:!TLSv1
 	SSLv23:!TLSv1_2:!TLSv1_1
@@ -137,9 +160,10 @@ for my $test (@tests) {
 	for my $ciphers ( '','HIGH:ALL' ) {
 	    my $cl = &$tcp_connect;
 	    if ( IO::Socket::SSL->start_SSL($cl,
+		%conf,
 		SSL_version => $v,
 		SSL_verify_mode => 0,
-		SSL_hostname => '',
+		SSL_hostname => $sni,
 		SSL_cipher_list => $ciphers,
 	    )) {
 		$use_version = $v;
@@ -160,40 +184,39 @@ for my $test (@tests) {
 	}
     }
     if ($version) {
-	VERBOSE(1,"successful connect with $version cipher=$cipher and no TLS extensions");
+	VERBOSE(1,"successful connect with $version cipher=$cipher, sni=$sni and no other TLS extensions");
+    } elsif ($sni) {
+	$sni = '';
+	goto BASE;
     } else {
 	die "$host failed basic SSL connect: $SSL_ERROR\n";
     }
 
-    my %conf = ( SSL_version => $version, SSL_cipher_list => $cipher );
-
-    # check if host accepts SNI
+    %conf = ( %conf, SSL_version => $use_version, SSL_cipher_list => $cipher );
     my $sni_status;
-    if ( $name && $version !~m{^TLS} ) {
-	VERBOSE(1,"disabling SNI because SSL version $version too low");
-    } elsif ($name) {
-	my $cl = &$tcp_connect;
-	if ( IO::Socket::SSL->start_SSL($cl, %conf,
-	    SSL_verify_mode => 0,
-	    SSL_hostname => $name,
-	)) {
-	    VERBOSE(1,"SNI success");
-	    $sni_status = 'ok';
-	    $conf{SSL_hostname} = $name;
-	} else {
+    if (!$sni) {
+	if ($version =~m{^TLS}) {
 	    VERBOSE(1,"SNI FAIL!");
-	    $sni_status = "FAIL: $SSL_ERROR";
-	    push @problems, "using SNI (default) -> $SSL_ERROR";
+	    push @problems, "using SNI (default)";
+	    $sni_status = 'FAIL';
+	    $conf{SSL_hostname} = '';
 	}
+    } else {
+	VERBOSE(1,"SNI success");
+	$conf{SSL_hostname} = $name;
+	$sni_status = 'ok';
     }
 
+
     # get chain info
     my (@cert_chain,@cert_chain_nosni);
     if ($show_chain || $dump_chain) {
 	for(
 	    [ \%conf, \@cert_chain ],
 	    ! $conf{SSL_hostname} ? () 
-		: ([ { %conf, SSL_hostname => '' }, \@cert_chain_nosni ])
+		# cloudflare has different cipher list without SNI, so don't
+		# enforce the existing one
+		: ([ { %conf, SSL_cipher_list => undef, SSL_hostname => '' }, \@cert_chain_nosni ])
 	) {
 	    my ($conf,$chain) = @$_;
 	    my $cl = &$tcp_connect;
@@ -326,6 +349,7 @@ for my $test (@tests) {
 	while ($all_ciphers || @ciphers<2 ) {
 	    my $cl = &$tcp_connect;
 	    if ( IO::Socket::SSL->start_SSL($cl, 
+		%conf,
 		SSL_verify_mode => 0,
 		SSL_version => $conf{SSL_version},
 		SSL_cipher_list => $c,
@@ -349,6 +373,7 @@ for my $test (@tests) {
 	for( "$ciphers[0][1]:$ciphers[1][1]","$ciphers[1][1]:$ciphers[0][1]" ) {
 	    my $cl = &$tcp_connect;
 	    if ( IO::Socket::SSL->start_SSL($cl,
+		%conf,
 		SSL_version => $use_version,
 		SSL_verify_mode => 0,
 		SSL_hostname => '',