*.aflowerlife.com

Issued by R3

About this certificate

This digital certificate with serial number 03:96:03:b2:d5:f8:4f:ad:ec:0a:a5:d2:66:28:f4:fd:fc:eb was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.aflowerlife.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:03:b2:d5:f8:4f:ad:ec:0a:a5:d2:66:28:f4:fd:fc:eb
Serial Number (int): 312384129086076172862275421210191394110699
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:12:14:d4:31:f7:22:95:a5:ae:d3:1c:31:e4:5a:b0:6c:da:b3:6a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): da:66:df:b5:cb:c3:82:96:e2:59:2c:17:9c:4f:cb:b7:4c:0d:29:3e
Fingerprint (sha256): 04:ce:02:1c:56:7b:78:b2:36:5e:01:72:43:60:ea:ea:08:a8:f9:20:a4:b0:6a:d9:b2:e7:ca:62:eb:75:97:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.aflowerlife.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.aflowerlife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aflowerlife.com
*.bakersinutah.com
*.bazbeaux.com
*.bbharding.us
*.brain-on-fire.com
*.capmedplus.com
*.castlebrookcondos.com
*.cbsp.rolandk.ca
*.centerstageclothiers.com
*.comprotintaytoner.com
*.connielecture.org
*.controlsweekly.com
*.crawfordmorgan.com
*.drummingthesoulawake.com
*.early2riseexercise.com
*.georgiacanecorso.com
*.guokas.net
*.jeffearls.com
*.kentcommunityfoundation.org
*.leadingwithintention.com
*.life-cycle-pet-cremation.com
*.listo3d.com
*.luxuryshowerbathexpress.com
*.oldmissiongazette.org
*.phaseiidesign.com
*.power-of-art.com
*.rainierfoothills.com
*.rcchorale.org
*.realmissionary.com
*.rolandk.ca
*.staceykweb.com
*.thegillzone.com
*.urbanbikeproject.org
*.warlandenterprises.com
aflowerlife.com
bakersinutah.com
bazbeaux.com
bbharding.us
brain-on-fire.com
capmedplus.com
castlebrookcondos.com
centerstageclothiers.com
comprotintaytoner.com
connielecture.org
controlsweekly.com
crawfordmorgan.com
customers.tigertech.net
drummingthesoulawake.com
early2riseexercise.com
georgiacanecorso.com
guokas.net
jeffearls.com
kentcommunityfoundation.org
leadingwithintention.com
life-cycle-pet-cremation.com
listo3d.com
luxuryshowerbathexpress.com
oldmissiongazette.org
phaseiidesign.com
power-of-art.com
rainierfoothills.com
rcchorale.org
realmissionary.com
rolandk.ca
staceykweb.com
thegillzone.com
urbanbikeproject.org
warlandenterprises.com

Other certificates including the domain name aflowerlife.com

(limited to 100 certificates)
*.aflowerlife.com
customers.tigertech.net
customers.tigertech.net
*.southhillfilms.com
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net

Certificate

The complete raw certificate details for *.aflowerlife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCN90E1mXty09N/kLlPV
aiUXPxOYBpDIf1g7vaRu8OWHHS9psiHslcL1IH3K6BksddyIRdkFGgHhOpVz7Q2K
36ZJ08RNAHDhB1EgfEE3ocrtEUsQyvPLw9I3MBnFWtto6bKgD+1VpSz2y8w85cR7
aje2hBmgBzYIucQxoRqHFSGOSgH7Uv1eWr1LIDHU3VZ4ABNqIk5ae/p2MX3VE0Pb
JnlmGrZGt9P4VuZuTGsc9C7yomU/3gO528c7Nc9gPeg05Pqibb1uyAcyIicb30Fr
riKrWtKmqoMMtfRfxgKmc0Af7TAON8ZGaynNU8Ar79BAfESouVtbTugydJ9IAYab
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312384129086076172862275421210191394110699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 08:36:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 08:36:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aflowerlife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21730489945225475147237775676369299776568159368139663381186447957947648001387043440994505622689379476781034145605174562412671258366001149654594648577663952920069494163582440725994536306413419343503358462467076842219814996174206571137409493387190466553258483727781663268480481690473802662122380057311135815954365569741876446387754820237591159602718713336865537533050194019554275099288642918480994886653857211258484345190307797220165154041637338034546721922889734745674574679110460776321320411850755404840620979348477137068669796049262830980304186507272568974533918345682992527001762287446993799557049102688908579609399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:19|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1440 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aflowerlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakersinutah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazbeaux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbharding.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brain-on-fire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capmedplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.castlebrookcondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbsp.rolandk.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centerstageclothiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comprotintaytoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connielecture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.controlsweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crawfordmorgan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drummingthesoulawake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.early2riseexercise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.georgiacanecorso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guokas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeffearls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kentcommunityfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leadingwithintention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.life-cycle-pet-cremation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.listo3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxuryshowerbathexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oldmissiongazette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phaseiidesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.power-of-art.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rainierfoothills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realmissionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rolandk.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staceykweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegillzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbanbikeproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warlandenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aflowerlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakersinutah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazbeaux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbharding.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brain-on-fire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capmedplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castlebrookcondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerstageclothiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comprotintaytoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connielecture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlsweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawfordmorgan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.tigertech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drummingthesoulawake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'early2riseexercise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiacanecorso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guokas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffearls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentcommunityfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadingwithintention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-cycle-pet-cremation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listo3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuryshowerbathexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldmissiongazette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phaseiidesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'power-of-art.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainierfoothills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realmissionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rolandk.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staceykweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegillzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanbikeproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warlandenterprises.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018755ecd2d30000040300473045022100e818e0eab96ec13a48fbd15d61ef49857bc2d600b6017bd0922fe72910fd1cda02205c0c6a8a8549c4ededbd62edbe194da3bdb936a78bf4393ac92ce3659d6026800076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018755ecd2e1000004030047304502204c766a5744c232f9e8e5500cff008a700dd2d95094536c4933fa36ace52bd034022100b26b5f5347ab7525ce67f04ae32a807b3bbeee6bdbd6a22a6381065ecef54e27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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