cigma.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:08:8d:2b:f0:30:26:64:cd:56:b9:d9:62:24:2b:7a:e1 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cigma.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:08:8d:2b:f0:30:26:64:cd:56:b9:d9:62:24:2b:7a:e1
Serial Number (int): 302522391021710900412741198521744854055649
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:34:9d:44:aa:24:30:c4:10:b6:a4:31:6c:d9:fe:cd:0f:d8:de:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:bf:b9:79:8b:0c:98:78:8d:ba:bf:41:e1:30:44:39:19:d4:7c:87
Fingerprint (sha256): 07:52:7c:bb:77:54:41:e8:8f:69:dd:b8:40:0e:0e:77:86:99:02:be:70:6a:66:aa:22:3c:57:9c:e6:10:f1:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cigma.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cigma.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.asklepius.com
*.avertigo.com
*.awordpress.com
*.barclaycradus.com
*.bbstars.com
*.bedbathandbath.com
*.capitoleone.com
*.casao.com
*.chasebannk.com
*.cigma.com
*.crazyhomeporn.com
*.datastoragetips.com
*.denene.com
*.dingdaang.com
*.dnaclone.com
*.faceookbook.com
*.fecbuk.com
*.fgogle.com
*.forpantyhose.com
*.freeposters.com
*.henriettas.com
*.infinitypartsusa.com
*.jackie-greene.com
*.juicey.com
*.kadusat.com
*.kamakazi.com
*.kompensasi.com
*.lewisuniversity.com
*.lunyan.com
*.mitsubishirewards.com
*.nailscheap.com
*.nkike.com
*.polandsping.com
*.scrapbookyourlife.com
*.sperm-cocktail.com
*.steesy.com
*.tazehaa.com
*.theautogroup.com
*.ticklemysweettooth.com
*.wallesfargo.com
*.wallgrenns.com
*.wholesaletreats.com
asklepius.com
avertigo.com
awordpress.com
barclaycradus.com
bbstars.com
bedbathandbath.com
capitoleone.com
casao.com
chasebannk.com
cigma.com
crazyhomeporn.com
datastoragetips.com
denene.com
dingdaang.com
dnaclone.com
faceookbook.com
fecbuk.com
fgogle.com
forpantyhose.com
freeposters.com
henriettas.com
infinitypartsusa.com
jackie-greene.com
juicey.com
kadusat.com
kamakazi.com
kompensasi.com
lewisuniversity.com
lunyan.com
mitsubishirewards.com
nailscheap.com
nkike.com
polandsping.com
scrapbookyourlife.com
sperm-cocktail.com
steesy.com
tazehaa.com
theautogroup.com
ticklemysweettooth.com
wallesfargo.com
wallgrenns.com
wholesaletreats.com

Other certificates including the domain name cigma.com

(limited to 100 certificates)
cigma.com
cigma.com
cigma.com
cigma.com
cigma.com
cigma.com
cigma.com
cigma.com
cigma.com
cigma.com
doctorshospital.com
www.cigma.com
cigma.com
cigma.com
www.cigma.com
www.cigma.com
cigma.com
www.cigma.com
cigma.com

Certificate

The complete raw certificate details for cigma.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302522391021710900412741198521744854055649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 18:34:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 18:34:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cigma.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 697546078462366549358985723326297082460705470097760169248188703511397378777392040846565011765775594359142905355754573215091463753129078676253385675185115930698115229905002035143192196428188224517364848325196036189961868826277266626790955026894220348320114975950062597371591299899345563153803300874477659901759046211711620223905699492641839222488697507214036910107948371869211104124409233311261677959968119166970521281855703148973134071548793995319458634927076198439972024233405042785798342246182499890839267876253375021888124685406157361343788557071794509921685284415829462240071191697824978392038005983101329524769132015697113956646286620755080748952749336827720792922430728038779461185174403026177515651173190155094704961954697009473758553432183216266949762283561180428106264645342260430571916581341594571168715041359288521410227396057711556041138884481150333584908882044805636395281739757430558316507252179964398308500187906092011954415039399922161358330038331265444818701804957123494659537189760609225079429686146213519267665689298504775558196475493588192394072090055240699327708205427545776899990138950704990380100787235798929355829014812153849045782946436689248987792435244458263174096894038810229903354302454031149960283619881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62349d44aa2430c410b6a4316cd9fecd0fd8de66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1458 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asklepius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avertigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awordpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barclaycradus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedbathandbath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitoleone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chasebannk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cigma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crazyhomeporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datastoragetips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dingdaang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnaclone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faceookbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fecbuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fgogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forpantyhose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.henriettas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infinitypartsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jackie-greene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juicey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kadusat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kamakazi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kompensasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lewisuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lunyan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitsubishirewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nailscheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nkike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polandsping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrapbookyourlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sperm-cocktail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steesy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tazehaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theautogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticklemysweettooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wallesfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wallgrenns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wholesaletreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asklepius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avertigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awordpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barclaycradus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedbathandbath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitoleone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chasebannk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cigma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazyhomeporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datastoragetips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dingdaang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnaclone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceookbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fecbuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forpantyhose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henriettas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infinitypartsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackie-greene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadusat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamakazi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kompensasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewisuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunyan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitsubishirewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nailscheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polandsping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrapbookyourlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sperm-cocktail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steesy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tazehaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theautogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticklemysweettooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallesfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallgrenns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesaletreats.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168f2a6f5da0000040300473045022071c01b12211c3c07b22538e21cccae6c89ee43229507d26de447bd88b5a0dd02022100f7def4d1ef9babeb183794372c7e4c05db494fabbc751e167acb67f5a07722b6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168f2a6f3f30000040300473045022100f542d219124833bfe8edcde67572f1a136aec9f9b7d25cf0d85019910644879c02206898ed2f12928e63170e769b4a3aae2ec4ad788ed17e71c4cd3d0f277829863c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0063392dc4aa3fa6ab48d2831172cee591fc9594c1a5ed43402257e25b94182d3ed9fc2ac0a4add95a37bf4690113420f5db4684bcc840f9b59e7df5ab09b42eee6e68804591e63503ff4c07be8f743730b646751ca622bb1d7d1fc729b8f07d09833207286b5563ee0ac96b3508a0f5ee4d050769915b8275c2f5a57c10fc0c93801d2df802acb3470a23265300c85ca4e5c0d480ef81ceea992768357ba5d8375d20dbefd819a529a3d8c5f64d4cdc97e59fe3138940b4f1b47eb80e18fd8dcf7acdc08bdb4b64cd5f422f33789e523a15f1d22868c403c925751bba6fc5cd4b2621db3af33a6b62583e9d20b783d0bd6b8382e98af3fd39cd26c4a98c18eb55