le2.pls.merkleinc.com

Issued by R3

About this certificate

This digital certificate with serial number 03:14:ed:f8:8d:bf:12:13:66:e2:08:7e:70:08:f7:40:41:13 was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=le2.pls.merkleinc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:ed:f8:8d:bf:12:13:66:e2:08:7e:70:08:f7:40:41:13
Serial Number (int): 268458822733279378248997601101875479855379
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 73:e6:55:3b:e1:d3:23:d9:6f:64:80:e3:b5:2e:26:2a:a2:08:65:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2d:a9:fc:58:83:4e:3d:41:c3:34:a3:1c:70:09:34:0b:88:4f:2c:f4
Fingerprint (sha256): 08:9d:a1:ee:e0:b2:59:57:68:c9:c4:d4:04:87:b6:d4:61:57:7d:ae:f0:79:e7:2c:e6:a6:dc:c2:57:b7:15:b3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate le2.pls.merkleinc.com

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for le2.pls.merkleinc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

celebrationofgivingsweepstakes.cetaphil.com
le2.pls.merkleinc.com
loveyourskinandwinsweeps.cetaphil.com
review.mrlrpromotions.com
review.playheinzredzone.com
skinquiz.cetaphil.com
www.110birthday.oreo.com
www.12daysofchexmas.com
www.20gsweeps.com
www.advanceautoracetowin.com
www.adventurerewardssweepstakes.com
www.babewinespintowin.com
www.callmebettycrocker.com
www.caprisunsweepstakes.com
www.carharttpocketfullofpresents.com
www.cinnamojime.com
www.courseherocollegegrit.com
www.cp50millionsweeps.com
www.drinklimitlesssweepstakes.com
www.dunkinextras.com
www.dunkinsavingstime.com
www.dunksweeps.com
www.dunkwithvelveeta.com
www.embraceyourinnerpanda.com
www.flxscratchscore.com
www.fslvgiveaway.com
www.goodforthefuture2022.com
www.hallsminiscameo.com
www.happyheartscheerios.com
www.heinz57culinarymagic.com
www.jeudetestarbucks.ca
www.kraftflvrs.com
www.kraftheinzsaveearnwin.com
www.malltogethersweeps.com
www.mccafebrewercontest.com
www.mdlzfreerackpromo.com
www.michaelkorssweepstakes.com
www.mrlrpromotions.com
www.myteacherwinscontest.com
www.naturevalleybjssweeps.com
www.nutstalgia.com
www.nuttytraditions.com
www.oreo110.ca
www.ouimercibouquet.com
www.playheinzredzone.com
www.scorewithvelveeta.com
www.sgh-sweep-arn.com
www.sno-gurtboard.com
www.spendearnwin.com
www.starbucksprizeanddelight.com
www.tcp25daysofgiving.com
www.togetherwefan.com
www.unwraptheranch.com

Other certificates including the domain name merkleinc.com

(limited to 100 certificates)
dx.merkleinc.com
le1.pls.merkleinc.com
lyncae.merkleinc.com
emea.secureshare.merkleinc.com
signon.merkleinc.com
lyncae.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
*.lner.merkleinc.com
promo.merkleinc.com
*.lookalike.m1.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www2.merkleinc.com
pipes.merkleinc.com
*.lookalike.m1.merkleinc.com
le2.pls.merkleinc.com
denvpn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
rmg-vpn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
vpn.merkleinc.com
www.apricot.merkleinc.com
allyreporting.merkleinc.com
le2.pls.merkleinc.com
*.merkleinc.com
*.jpostma-discovery.aws-sandbox.analytics-emea.merkleinc.com
merkury.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www.mission45.be
le1.pls.merkleinc.com
rmg-vpnbackup.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
code.test.pls.merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
merkleinc.com
le1.pls.merkleinc.com
next-ci.aws-aquila.analytics-emea.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
sonar.merkleinc.com
le2.pls.merkleinc.com
dx.merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
webmail.merkleinc.com
*.lookalike.m1.merkleinc.com
officewebapps.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
pegademo.merkleinc.com
merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
le1.pls.merkleinc.com
ci.jpostma-discovery.aws-sandbox.analytics-emea.merkleinc.com
pegademo.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
dx.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
lsweb2013-cn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
admin.buytime.network
sfbusae.merkleinc.com
lyncae-cn.merkleinc.com
le2.pls.merkleinc.com
pipeline.8bitpictures.com
lsweb2013-eu.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www2.merkleinc.com
le1.pls.merkleinc.com
vdidev.merkleinc.com
officewebapps.merkleinc.com
*.lner.merkleinc.com
aue1.xfer.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
lsweb2013-cn.merkleinc.com
maytecedillo.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com

Certificate

The complete raw certificate details for le2.pls.merkleinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT4ZkhhQ+7gelztJjXQm
bfdRhwl2WIoKQVfclqERvvHLN+txr6rvDw85sugYcleuXznfB/9K7/qy21pv89Ka
nNtgKis1vMTB/1HqkYm61TneRREh6iTXC/8tp4xOAKXZBTEsxtFarcOnPGRFBQ5E
/tXLt7tCR8W7VnaPD3oJogd2X9AMuBoYLauH9o4t9dfYTQGVt2D6zJuq3a/rHX/L
3Hc6rWRZXFGClyTQq8q4WQK/K28uyA8Xkmf/AvdjchzNAUM+pgdiNMKSUmZM1ote
vkPuWolPOAkGO3XuNVAyOB4gMwKhkl/3powLOw4ngOVPBquA2nSajIkK9EHcuUWr
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268458822733279378248997601101875479855379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-01 19:16:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-30 19:16:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'le2.pls.merkleinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23889662233436274869311718274349874282198174446174989741213422460290411624289089293532812192606644189251084210029073027341622307792704895198094351782214487215223574123580547834233214709990373464851724994150822547709637938229843812708339594043184303618945703665811028109114435471023775605288165928855690157976527125171217649678965549561243594969831730211924919264320951336278346027017150380219553354679874110531926093574512256335278784325448701379725628919371514230150013038219204599737175781318079407925558600697561603625286940266434909525453741243698410320717042403057275751672179149712478748208520350163238566341503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73e6553be1d323d96f6480e3b52e262aa2086527
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1442 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebrationofgivingsweepstakes.cetaphil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'le2.pls.merkleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveyourskinandwinsweeps.cetaphil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.mrlrpromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.playheinzredzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinquiz.cetaphil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.110birthday.oreo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12daysofchexmas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.20gsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advanceautoracetowin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adventurerewardssweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babewinespintowin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callmebettycrocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caprisunsweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carharttpocketfullofpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinnamojime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courseherocollegegrit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cp50millionsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drinklimitlesssweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunkinextras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunkinsavingstime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunksweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunkwithvelveeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embraceyourinnerpanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flxscratchscore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fslvgiveaway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodforthefuture2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallsminiscameo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happyheartscheerios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heinz57culinarymagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeudetestarbucks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraftflvrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraftheinzsaveearnwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malltogethersweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccafebrewercontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdlzfreerackpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelkorssweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrlrpromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myteacherwinscontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturevalleybjssweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutstalgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuttytraditions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oreo110.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouimercibouquet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playheinzredzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scorewithvelveeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgh-sweep-arn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sno-gurtboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spendearnwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starbucksprizeanddelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcp25daysofgiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherwefan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwraptheranch.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017f47204e560000040300463044022079441e84c6c58d5a28cd4ac477d212b6c7739646e8756567c5d0be10bab825fb022051b3c49f2257e794554754fa388f16c4de7e48c013518a8c452a8d18d80115d5007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017f47204ed90000040300483046022100e291f28808aa857a5e60368aec614e45d28d2d59d7a793176f57e477629edf4a022100a09b6821abf625949bfab40bdf8894c539457c0ffbd27bf86001a5033eb3f8ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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