reggioemilia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bf:5a:2e:06:e7:2f:f7:d4:c7:27:6f:64:3e:07:c6:f3:00 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=reggioemilia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:5a:2e:06:e7:2f:f7:d4:c7:27:6f:64:3e:07:c6:f3:00
Serial Number (int): 326450659382467130059668074163890928677632
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:5d:0b:74:0b:5e:b3:e0:db:90:f4:4a:52:8b:96:a0:a4:f6:e0:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:0f:9d:f4:a2:08:4d:5c:84:68:f8:d3:5c:a1:de:ca:90:78:54:94
Fingerprint (sha256): 09:ef:c1:67:b2:69:04:f3:57:f9:49:cc:ec:94:ee:0a:8b:c9:b0:b6:30:25:6b:3a:a3:5a:4f:5b:c5:7c:5b:91

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate reggioemilia.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reggioemilia.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

04378.com
34732.com
35472.com
40557.com
40959.com
43709.com
47205.com
88194.com
89740.com
aguaworld.com
altavilla.org
aquamade.com
balsamina.com
bellipiudiprima.com
californiasportsmed.com
constructionmd.com
cornaredo.org
dynagame.com
ejrc.com
elviscostello.org
esportsadelaide.com
esportskagoshima.com
gainesvillesportsmed.com
guidahotelitalia.com
hotelelcid.com
hotelodge.com
iewinc.com
invenditaonline.com
jointpaingainesville.com
lagunahillsstorage.com
littlesecretsmovie.com
masterlace.com
masteroad.com
mimokhilva.com
nationland.com
neomide.com
omahasportsmed.com
omni-logic.com
pastiglie.com
pizzatastic.com
polylake.com
polyvid.com
potterytree.com
reggioemilia.org
ricaricaautoelettriche.com
stemcellcartilage.com
thermashade.com
unitedkingdommma.com
unlube.com
wind-chime.com
www.04378.com
www.34732.com
www.35472.com
www.40557.com
www.40959.com
www.43709.com
www.47205.com
www.88194.com
www.89740.com
www.aguaworld.com
www.altavilla.org
www.aquamade.com
www.balsamina.com
www.bellipiudiprima.com
www.californiasportsmed.com
www.constructionmd.com
www.cornaredo.org
www.dynagame.com
www.ejrc.com
www.elviscostello.org
www.esportsadelaide.com
www.esportskagoshima.com
www.gainesvillesportsmed.com
www.guidahotelitalia.com
www.hotelelcid.com
www.hotelodge.com
www.iewinc.com
www.invenditaonline.com
www.jointpaingainesville.com
www.lagunahillsstorage.com
www.littlesecretsmovie.com
www.masterlace.com
www.masteroad.com
www.mimokhilva.com
www.nationland.com
www.neomide.com
www.omahasportsmed.com
www.omni-logic.com
www.pastiglie.com
www.pizzatastic.com
www.polylake.com
www.polyvid.com
www.potterytree.com
www.reggioemilia.org
www.ricaricaautoelettriche.com
www.stemcellcartilage.com
www.thermashade.com
www.unitedkingdommma.com
www.unlube.com
www.wind-chime.com

Other certificates including the domain name reggioemilia.org

(limited to 100 certificates)
reggioemilia.org
reggioemilia.org
reggioemilia.org
www.mississippistemcell.com
taggia.org
www.wellingtoncity.com
reggioemilia.org
reggioemilia.org
www.reggioemilia.org
atlantajointpain.com
conflicts.exposed
reggioemilia.org
reggioemilia.org
reggioemilia.org
armyair.com
duratravel.com
834.me
www.reggioemilia.org
www.reggioemilia.org
www.reggioemilia.org
www.reggioemilia.org

Certificate

The complete raw certificate details for reggioemilia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4pZjc65QcSm0G8Hto3P
RIziRhrOARop8wF/ymxIIG7WmC+Jog8JVr6sKk1oRulvY6rMh0ykgX9zDni3C+VJ
18yPYe0FmPDaGNaP9z+aEE917P4ZJ8tpP62Eg+lBH48qW/YefKDeOcT2fUeT5kTz
rpL6zvxOb4umc/lCjAAeNRBWxLq+e4mndWUsnQaMgnzUfk2lcKPEGv2pe6wId1mc
m41NwwpJKpOUxBPTWGD2vjjb+t7vXx/SzIVGK7ftCoZmf7AVAvrpEN9edKaFndyR
7RhGu2aR2voUVspw3PbEP8U914HAOp3bbZ/XR2tj3ux5xYQ8uPVLDGHEH865RDdu
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326450659382467130059668074163890928677632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 07:11:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 07:11:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reggioemilia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22159926208032342115722835864200333959782348192821660019514242240551769865047892770949643909264675651699746009258564203517148150162765341245102659207963135445023664739619839713862389648234167800841763307753515931552363354543545220523221159022138238149479468311375646655727760453244370124631063943238853106567682158993050724730710247666093115101125711017729700125695813451448047271305060449774677083274934446787912506131193710625151845484404957943479736807480300816582446445801623062620366388522928772132124013035163579820083343130591671181134380711356498161076833072682877800708874846193802378883066594156242789690991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							485d0b740b5eb3e0db90f44a528b96a0a4f6e078
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1874 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '04378.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '34732.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '35472.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '40557.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '40959.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '43709.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '47205.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '88194.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '89740.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aguaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altavilla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquamade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balsamina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellipiudiprima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constructionmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornaredo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynagame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elviscostello.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esportsadelaide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esportskagoshima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainesvillesportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidahotelitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelelcid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iewinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invenditaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpaingainesville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagunahillsstorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlesecretsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterlace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masteroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimokhilva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neomide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omahasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omni-logic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastiglie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizzatastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polylake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyvid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potterytree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reggioemilia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricaricaautoelettriche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellcartilage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermashade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedkingdommma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wind-chime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.04378.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.34732.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.35472.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.40557.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.40959.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.43709.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.47205.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.88194.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.89740.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aguaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altavilla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquamade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balsamina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellipiudiprima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.californiasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.constructionmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornaredo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynagame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ejrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elviscostello.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esportsadelaide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esportskagoshima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gainesvillesportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidahotelitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelelcid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iewinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invenditaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpaingainesville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagunahillsstorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlesecretsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterlace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masteroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mimokhilva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neomide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omahasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omni-logic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pastiglie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pizzatastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polylake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polyvid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potterytree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reggioemilia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ricaricaautoelettriche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellcartilage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermashade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedkingdommma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unlube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wind-chime.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a200ccd410000040300463044022068c76a2c5c4ae3c8bca12d9c9affdcb48b6e6f5b68c230e85bcb60c67f3c43ce02201005fb3ca5111fdc600af044fb59fb265cd7879b265bf5e01096bc20e8aa049d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a200ccdb600000403004630440220723364858e92475270960f98f8b6179a885ef4d36d3e8fb6d9b9bf9d2b9c0d840220360ec295319b36955305a21c9480598a41c2648bfa10d2d48d50cc0647b89473
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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