mail1.bitsculptor.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:aa:26:08:e4:32:0a:f5:26:28:59:d2:6a:a5:c4:79:c5:72 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail1.bitsculptor.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:26:08:e4:32:0a:f5:26:28:59:d2:6a:a5:c4:79:c5:72
Serial Number (int): 319235417002409162785849115722614994224498
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:ba:5f:74:99:7e:d4:b5:85:64:0f:cb:99:5c:18:1b:5f:0d:af:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:54:d9:ff:21:10:7a:ed:24:5f:1b:1f:a7:bb:08:b1:97:a9:f0:37
Fingerprint (sha256): 09:a7:15:68:53:de:00:d8:98:73:75:1d:c4:38:fe:07:f3:55:ac:75:5d:bb:60:6d:0d:18:b3:f8:8a:36:67:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail1.bitsculptor.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail1.bitsculptor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.airiart.com
mail.alaskazimm.com
mail.allnationsglobal.org
mail.anitaswanson.com
mail.aqmpm.com
mail.asm-afs-peoria.org
mail.banjohangout.org
mail.bethanycommunitychurch.org
mail.bitsculptor.com
mail.borntob.com
mail.brooktrailsfire.com
mail.cancersupportsonoma.com
mail.ckevinatter.com
mail.clearlakeperformingarts.org
mail.colemko.com
mail.countryair.com
mail.fiddlehangout.com
mail.flatpickerhangout.com
mail.grasstrax.com
mail.gringpestcontrol.com
mail.h2owiser.com
mail.hammersforhope.org
mail.hangoutnetwork.com
mail.harmonyhealinghouse.com
mail.heydeeye.com
mail.hoplandfire.org
mail.jaredhendricks.com
mail.kiwanislakeport.org
mail.konoctirealty.com
mail.koslagroup.com
mail.lakecochamber.com
mail.lakecountyheroproject.com
mail.lakecountysymphonyassociation.org
mail.lakecountywinestudio.com
mail.lakeportchamber.com
mail.lakeportenglishinn.com
mail.lakeportfire.com
mail.lakeportlawyers.com
mail.lakeportmainstreet.com
mail.lakeps.com
mail.lakeviewmarket.com
mail.livinghopecentral.org
mail.localfires.com
mail.logisticlinks.com
mail.madesonphotography.com
mail.mandohangout.com
mail.mapletonmanagement.com
mail.midwestvineyardsupply.com
mail.needmedi-cal.com
mail.nordhammer.com
mail.paciniwines.com
mail.predatorpestcontrol.biz
mail.predatorpwm.com
mail.redwoodvalleyfire.org
mail.regencyinnlakeport.com
mail.resohangout.com
mail.runningspringshvac.com
mail.sdgtoday.com
mail.shastalakevacations.com
mail.silverajewelry.com
mail.simplesweet.com
mail.skylarkshoreshotel.com
mail.solreyproperties.com
mail.soperreesetheatre.com
mail.sorensendesigngroup.com
mail.stfrancoisvineyard.com
mail.stokesladders.com
mail.switzerengineering.com
mail.theritzes.com
mail.towacosm.com
mail.turnkeyprod.com
mail.vdwengr.com
mail.visitkelseyville.com
mail.whiteoaknursery.com
mail.winecountryranchesandland.com
mail.wineryassociation.com
mail.woodsongguitars.com
mail.yourhappysmile.com
mail.zwiftblog.com
mail1.bitsculptor.com

Other certificates including the domain name bitsculptor.com

(limited to 100 certificates)
mail1.bitsculptor.com
mail1.bitsculptor.com
mail1.bitsculptor.com
lvpscp-4.bitsculptor.com
bitsculptor.com
www.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
lvpscp-4.bitsculptor.com
jamesboysblog.bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
sossforsud.bitsculptor.com
lvpscp-3.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
secure.bitsculptor.com
bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
www.bitsculptor.com
mail1.bitsculptor.com
secure.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
lvpscp-3.bitsculptor.com
mail1.bitsculptor.com
clrcadev.bitsculptor.com
bit1.bitsculptor.com

Certificate

The complete raw certificate details for mail1.bitsculptor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGWY+0jDYzQN2Y/0IcMu
EwcUmX9XKysL1mEKDOT/hU8iqUo7545C/iUoc7x17k1dgi8/chhj2GLt7QzUwQA/
iRZ4G8q+0rRYyQlp5sen2zqvmN1uTXVpOCFkM2I8tkPJfnL6TSH/ND2nfgA0LUVt
1VoVP3dAYBQGn91gLVUIi5x3sdLWpYnJtJ6cVSdUJywjBUYWLgUaKt/+2UTmbxfe
pkRN+KrrhKi8c5KAJ6/7kQNTTZN11+eHidiqcKOabOaDdW/uOyyhrgFShd0cM0ix
n0LAwgoXE3WUAJQEhCUK5wSamMPDNS5b7f5zxzj+FX6OEHW6hoTIrD28rXs27AL6
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319235417002409162785849115722614994224498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 15:09:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 15:09:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail1.bitsculptor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24287854189537180655369422417034192757706511642990809626976982010517994395556344545567361058011275014443728621609264929468630236239120738418097839292073451605583246839420946949536070910745048527071259183245485106529018377352705493425469636360424626512887512283609463730506144979414105633725894178879607903854547719664531792991313562655795387795875492844924680170265231750802431945883832689362930388093732147819399223021824098873907856342487405995205838857280651626940215920622621541910401457098874560405305735631317481090039925492319948201077610372360933759812738715425854231165912729043785643490138236248425737943567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3ba5f74997ed4b585640fcb995c181b5f0daf27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2012 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.airiart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.alaskazimm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.allnationsglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.anitaswanson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aqmpm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.asm-afs-peoria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.banjohangout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bethanycommunitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bitsculptor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.borntob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.brooktrailsfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cancersupportsonoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ckevinatter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.clearlakeperformingarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.colemko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.countryair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fiddlehangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.flatpickerhangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grasstrax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gringpestcontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.h2owiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hammersforhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hangoutnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.harmonyhealinghouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.heydeeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hoplandfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jaredhendricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kiwanislakeport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.konoctirealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.koslagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakecochamber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakecountyheroproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakecountysymphonyassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakecountywinestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportchamber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportenglishinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportmainstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeviewmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.livinghopecentral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.localfires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.logisticlinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.madesonphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mandohangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mapletonmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.midwestvineyardsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.needmedi-cal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nordhammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.paciniwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.predatorpestcontrol.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.predatorpwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.redwoodvalleyfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.regencyinnlakeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.resohangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.runningspringshvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sdgtoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.shastalakevacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.silverajewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.simplesweet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.skylarkshoreshotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.solreyproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.soperreesetheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sorensendesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stfrancoisvineyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stokesladders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.switzerengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.theritzes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.towacosm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.turnkeyprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vdwengr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.visitkelseyville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.whiteoaknursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.winecountryranchesandland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wineryassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.woodsongguitars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.yourhappysmile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zwiftblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1.bitsculptor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a21c2c1280000040300473045022100c7879ed6415e3d76e71df1f13374df10db68e4dd7be3cdf53db3fcf6a6c2b80102200e210e14b465b6e40c958fc5a3689a9240a2189951c76698ee3241b295af56ad007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a21c2c1710000040300463044022033c179d55803f12c6f4809fd15304fbc6e496899828c7f9204b7c2539cb2df40022045ff823dba27e1d45afd88daa82ec3ea08adc9325445ff53037f100a037b41ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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