castiglionemesserraimondo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3c:3d:28:a6:01:a0:de:61:2a:b4:5e:b8:00:23:60:0a:4c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=castiglionemesserraimondo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3c:3d:28:a6:01:a0:de:61:2a:b4:5e:b8:00:23:60:0a:4c
Serial Number (int): 281835093777163277819678681892881113811532
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c8:d7:e5:f0:94:c6:39:ef:0a:59:51:72:bf:5f:a8:04:89:0e:94:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 12:80:69:cd:bb:40:ea:de:a3:71:d4:53:be:6c:54:e8:42:22:40:9b
Fingerprint (sha256): 00:4b:50:6c:31:4d:c4:18:13:49:84:3a:92:05:f9:42:68:a8:ec:91:1a:75:56:af:f7:66:f7:96:5f:c4:2e:fd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate castiglionemesserraimondo.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castiglionemesserraimondo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a-y.com
arasart.com
awardmoney.com
bamboobet.com
berrymaster.com
betteddit.com
botnexus.com
boyotaku.com
budtenderness.com
budtenderslist.com
castiglionemesserraimondo.com
caucciu.com
chemprogress.com
childrensquest.com
cjcw.com
dawcy.com
deliversys.com
dementiapreventionstudy.com
dynasox.com
hangpro.com
hipsteroutpost.com
hotelgx.com
ichilist.com
irlyt.com
jointpainvermont.com
kidsfoodgrowingkit.com
leasingway.com
marshkills.com
megflex.com
newyorkcitypodiatrist.com
nushot.com
oldpathway.com
parvot.com
polywet.com
printalley.com
pumpx.com
qualu.com
regenerationtoday.com
seaztheday.com
sorrex.com
stariot.com
supportingpatients.com
tastehoney.com
thermflex.com
thnu.com
threesix.com
travel.mex.com
urflex.com
vidaflex.com
vymax.com
www.a-y.com
www.arasart.com
www.awardmoney.com
www.bamboobet.com
www.berrymaster.com
www.betteddit.com
www.botnexus.com
www.boyotaku.com
www.budtenderness.com
www.budtenderslist.com
www.castiglionemesserraimondo.com
www.caucciu.com
www.chemprogress.com
www.childrensquest.com
www.cjcw.com
www.dawcy.com
www.deliversys.com
www.dementiapreventionstudy.com
www.dynasox.com
www.hangpro.com
www.hipsteroutpost.com
www.hotelgx.com
www.ichilist.com
www.irlyt.com
www.jointpainvermont.com
www.kidsfoodgrowingkit.com
www.leasingway.com
www.marshkills.com
www.megflex.com
www.newyorkcitypodiatrist.com
www.nushot.com
www.oldpathway.com
www.parvot.com
www.polywet.com
www.printalley.com
www.pumpx.com
www.qualu.com
www.regenerationtoday.com
www.seaztheday.com
www.sorrex.com
www.stariot.com
www.supportingpatients.com
www.tastehoney.com
www.thermflex.com
www.thnu.com
www.threesix.com
www.travel.mex.com
www.urflex.com
www.vidaflex.com
www.vymax.com

Other certificates including the domain name castiglionemesserraimondo.com

(limited to 100 certificates)
castiglionemesserraimondo.com
www.castiglionemesserraimondo.com
castiglionemesserraimondo.com
castiglionemesserraimondo.com
castiglionemesserraimondo.com
castiglionemesserraimondo.com
www.castiglionemesserraimondo.com
www.castiglionemesserraimondo.com
castiglionemesserraimondo.com
www.castiglionemesserraimondo.com
www.castiglionemesserraimondo.com
www.baselgadipine.com
rossella.org
castiglionemesserraimondo.com

Certificate

The complete raw certificate details for castiglionemesserraimondo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoph3p+lbrY62oY4/2Jo
HRCl+KIHzhtB57Evks8hRI8DXFfhyHoOoeK4ODdGsHEiSLFy1SH+VoKQ6z4lpvfX
2acVRfe2qvLFYrVDZHoGLZrTTWz2A8Ns+oH/tKTlmWPc7TJsyD8C21QYQwsOuMVd
paeKHwXDUoggFEKmhS5uBpT9wutU0/+2GcRfYJDoxC/d+NfycIreSq2JqAACptOg
StaRpgcAxLof0QktkE5OTATEpNvp5yB4dzBufM7tU4KYmJMcpxlH8ehz9jfvsBj8
vpK7iFb/9Uu1yavZFMiWXjoER1rYtPSgmD6RvcbzRdV4qqWfzbay6fW5D03qA+hx
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281835093777163277819678681892881113811532
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 21:41:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 21:41:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castiglionemesserraimondo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23043610360835917479952194313005235854313391503569025242450792815519130470153883253361837693523791499077181371145625153072530271524966305128573962531226032718067268177145275001107344039899343128173539646348868208054514988347712755840219201634282238456043483347701730694573498696806256024303838676997188027486642952552659104805564317928571132064796488977778978867155147598898281004439801754569230128970253013613288824519272271158886069975857017194500102498179194651228535350994618687909281761018770971302116422316598999886321551791919078085293076189018624840962979169799039795979533832182295080320312574827241251828197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8d7e5f094c639ef0a595172bf5fa804890e94c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-y.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arasart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awardmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamboobet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berrymaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betteddit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botnexus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boyotaku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budtenderness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budtenderslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castiglionemesserraimondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caucciu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemprogress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childrensquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjcw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dawcy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliversys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dementiapreventionstudy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynasox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hangpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipsteroutpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelgx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ichilist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irlyt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainvermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsfoodgrowingkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leasingway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshkills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkcitypodiatrist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nushot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldpathway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polywet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pumpx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regenerationtoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaztheday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorrex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stariot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportingpatients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tastehoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thnu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.mex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidaflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vymax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a-y.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arasart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awardmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bamboobet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berrymaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betteddit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.botnexus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boyotaku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budtenderness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budtenderslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castiglionemesserraimondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caucciu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chemprogress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.childrensquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjcw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dawcy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deliversys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dementiapreventionstudy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynasox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hangpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hipsteroutpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelgx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ichilist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irlyt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainvermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidsfoodgrowingkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leasingway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marshkills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.megflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorkcitypodiatrist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nushot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldpathway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polywet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pumpx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regenerationtoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaztheday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorrex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stariot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportingpatients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tastehoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thnu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.threesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travel.mex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vidaflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vymax.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a2d76949b00000403004730450221009dc1757df2c324f8bb2e7a7bd7503247c3db059e9f23051f1f019a6aa483662502205f74d3828560a9b6bf508f155576e5520a634735b5b098aa5dea8a16ffd8358f00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a2d7694a1000004030046304402201d9e50248888cc30964b2580238b62d96a868b5c7e35fa3df7c970f9329adb7102201df9ba19cf7f41ff8dda5a183197ae38146db7af8222583a3416f67e4645d45c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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