le1.pls.merkleinc.com

Issued by R3

About this certificate

This digital certificate with serial number 03:46:9a:e3:bc:89:a5:75:6b:6f:e9:7d:8c:86:95:be:08:88 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=le1.pls.merkleinc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:46:9a:e3:bc:89:a5:75:6b:6f:e9:7d:8c:86:95:be:08:88
Serial Number (int): 285362507066482667561874081555649849591944
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:dd:79:4d:41:7d:29:61:d1:eb:04:01:65:23:e1:82:41:c2:d5:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:f4:a8:ea:5e:5b:b0:b8:55:ab:f7:04:8c:87:28:d7:38:09:71:0a
Fingerprint (sha256): 00:5b:3e:4c:a2:c4:b8:1e:8b:f5:18:2c:0f:f8:cc:9d:9d:67:5c:1a:35:20:ed:dd:07:74:04:e5:a9:6c:07:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate le1.pls.merkleinc.com

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for le1.pls.merkleinc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.helloworld.com
assets-dev.helloworld.com
assets.helloworld.com
eprizetestpromo.com
events.starbucks.com
game.playmypanera.com
le1.pls.merkleinc.com
liftoffentry.oreo.com
millerlitesummer.beveragepromo.com
oscartakemetoprom.oscarmayer.com
promo.coke.com
review.bluebags4wags.com
review.liftoffentry.oreo.com
review.nabiscobacktoclass.com
review.nabiscosnackbracket.com
review.promo.coke.com
review.tcpholidaycountdown.com
review.yoplaititforward.com
sweepstakes.caprisun.com
www.athletagsttsweeps.com
www.beveragepromo.com
www.birdsvillesweepstakes.com
www.bluebags4wags.com
www.boxtopsreadyforanything.com
www.cartersholidays.com
www.carterssantagram.com
www.cheeriosoffer.com
www.countdowntochexmas.com
www.crushspringsweeps.com
www.dunkinfun.com
www.dunksweeps.com
www.eprizetestpromo.com
www.fallfamilygamenight.com
www.falloffforgiveness.com
www.fillyourcupcontest.com
www.hvrmarketsidesweepstakes.com
www.jeudelaterrestarbucks.ca
www.kdpincentive.com
www.mdlzrackoffer.com
www.musicmagic2023.com
www.nabiscobacktoclass.com
www.nabiscosnackbracket.com
www.nfcurefer.org
www.nvbjssweeps.com
www.ouistylebythespoonful.com
www.plantersnutbowl.com
www.platedebate.com
www.pointscatalog-codeentry.com
www.pscusurprisesafari.com
www.purelifeshareascare.com
www.puremichiganmix.com
www.ranchnightcontest.com
www.readyeaterone.com
www.recompensesstarbucksconstellations.ca
www.regionsthankyousweepstakes.com
www.snacks15.com
www.sourfruitrollups.com
www.summersgreatestsips.com
www.summersnackingsweeps.com
www.suresmilerewards.com
www.tcpholidaycountdown.com
www.tearintoflavor.com
www.thebestschooldayever.com
www.tjxrewardsjingleball.com
www.yoplaititforward.com
www.yoplaitlids.com

Other certificates including the domain name merkleinc.com

(limited to 100 certificates)
dx.merkleinc.com
le1.pls.merkleinc.com
lyncae.merkleinc.com
emea.secureshare.merkleinc.com
signon.merkleinc.com
lyncae.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
*.lner.merkleinc.com
promo.merkleinc.com
*.lookalike.m1.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www2.merkleinc.com
pipes.merkleinc.com
*.lookalike.m1.merkleinc.com
le2.pls.merkleinc.com
denvpn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
rmg-vpn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
vpn.merkleinc.com
www.apricot.merkleinc.com
allyreporting.merkleinc.com
le2.pls.merkleinc.com
*.merkleinc.com
*.jpostma-discovery.aws-sandbox.analytics-emea.merkleinc.com
merkury.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www.mission45.be
le1.pls.merkleinc.com
rmg-vpnbackup.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
code.test.pls.merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
merkleinc.com
le1.pls.merkleinc.com
next-ci.aws-aquila.analytics-emea.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
sonar.merkleinc.com
le2.pls.merkleinc.com
dx.merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
webmail.merkleinc.com
*.lookalike.m1.merkleinc.com
officewebapps.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
pegademo.merkleinc.com
merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
le1.pls.merkleinc.com
ci.jpostma-discovery.aws-sandbox.analytics-emea.merkleinc.com
pegademo.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
dx.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
lsweb2013-cn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
admin.buytime.network
sfbusae.merkleinc.com
lyncae-cn.merkleinc.com
le2.pls.merkleinc.com
pipeline.8bitpictures.com
lsweb2013-eu.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www2.merkleinc.com
le1.pls.merkleinc.com
vdidev.merkleinc.com
officewebapps.merkleinc.com
*.lner.merkleinc.com
aue1.xfer.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
lsweb2013-cn.merkleinc.com
maytecedillo.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com

Certificate

The complete raw certificate details for le1.pls.merkleinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcupJ2Z+kpL+sNkxVWHJ
ZtCiq7TcYisB5nW3p8R5pnzUsiG5xdExQkwjJLKJQNFRqmotyeH3UradF9GdM/tR
3aH0ChBgcxJsWC99/oh0Sx51q1iuz0KqfcDSW2X84QxTuUSKA6hWpiknjL+5MgaA
JDN0dQh0v/1tEtksiaNaNsVOeBuZIwQ6MG0H5e5I+YzgcaQS9qHAVT9UBPE/MCe8
qhdRmONblRTrDvBvmNDba4o+x1xrQA3H0nEiQ+dz4F+lPi8+k2Gxc2+/V2gBjtBs
RevvDEWDPgw/CIsl51glOBDVZW3QPaqqTedFEDjA5QgLp+7Eds8U6LrZk59YwzGV
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285362507066482667561874081555649849591944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 15:59:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 15:59:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'le1.pls.merkleinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18404983082613006542854074495921861948403119492711600040220465992639390101851014809561322394013233387705572007755190221217983610167318855942366190688024675239353197809846099862533853401158230947651041395851876483176320083604034897965746948889168256924860885403990537836455157605417503448075468450558524974555287563552217140495656489269076970709244753890282047232057755436627635727839523068419059200259317253910730974913162522581183674662394387205986156570696557849627849187506530505741893806773924972050112141167987470184446038354919641884638359802019782895155235865750791540922749126397512657451772682893827186464067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55dd794d417d2961d1eb04016523e18241c2d598
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1756 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.helloworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-dev.helloworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.helloworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eprizetestpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.starbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game.playmypanera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'le1.pls.merkleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liftoffentry.oreo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millerlitesummer.beveragepromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscartakemetoprom.oscarmayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.bluebags4wags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.liftoffentry.oreo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.nabiscobacktoclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.nabiscosnackbracket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.promo.coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.tcpholidaycountdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.yoplaititforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweepstakes.caprisun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athletagsttsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beveragepromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birdsvillesweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluebags4wags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxtopsreadyforanything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartersholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carterssantagram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheeriosoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countdowntochexmas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crushspringsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunkinfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunksweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eprizetestpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fallfamilygamenight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falloffforgiveness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fillyourcupcontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvrmarketsidesweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeudelaterrestarbucks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kdpincentive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdlzrackoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musicmagic2023.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nabiscobacktoclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nabiscosnackbracket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nfcurefer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvbjssweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouistylebythespoonful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantersnutbowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.platedebate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointscatalog-codeentry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pscusurprisesafari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purelifeshareascare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puremichiganmix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchnightcontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readyeaterone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recompensesstarbucksconstellations.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regionsthankyousweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snacks15.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sourfruitrollups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summersgreatestsips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summersnackingsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suresmilerewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcpholidaycountdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tearintoflavor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebestschooldayever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tjxrewardsjingleball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yoplaititforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yoplaitlids.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fa13ea90500000403004830460221008dcc0a9aee53c5a2e05bc655b2302e4a94bba84cb45b4b187460dee330820f440221008a4f32814d6a57469beeb10fc9501fc2100777b237278d0709c348bfdbb2fffc00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fa13ea8fa000004030046304402201eac12d00b7e632b6a2d6ef7321facb2ff103f12b9dd56b97c0fee7ef624dbd60220463a4615425776a3e808ea7eb8759740ed333385c4e3ee0c574d4f05ba30577a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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