*.neal-tec.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:b2:24:82:0d:67:d6:5f:8a:12:cd:62:fd:bc:e1:b8:50 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.neal-tec.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:b2:24:82:0d:67:d6:5f:8a:12:cd:62:fd:bc:e1:b8:50
Serial Number (int): 284032286155774651512337336329966276687952
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:c1:dd:a4:9f:61:a2:b4:0e:15:1e:64:e9:61:71:88:14:6f:e3:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:1d:1a:ad:4b:4f:16:97:0b:c6:86:ba:c2:59:bc:4b:99:87:47:a6
Fingerprint (sha256): 0a:14:07:e6:95:f2:03:25:ef:2c:67:d3:5d:4e:c0:09:99:9d:0c:63:a9:55:b7:6e:be:34:7e:18:ec:5c:13:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.neal-tec.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.neal-tec.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adamlima.com
*.aldosser.com
*.americanstrings.net
*.antiquesandmercantile.com
*.ariataylor.com
*.billcounts.com
*.billwinkler.com
*.brigbianchi.com
*.burroakknives.com
*.cardjazz.com
*.casanovacarriage.com
*.cfrassociates.org
*.checkerboardrecords.com
*.clonekit.com
*.clydesheets.com
*.communitycatcare.org
*.computer-prescriptions.com
*.computersimulation.org
*.cytographica.com
*.dakindproperties.com
*.dancingonmountaintops.com
*.danielwoods.com
*.daveharris.biz
*.defenderoftheflow.com
*.dmsindex.com
*.doncoomesart.com
*.doubleplatearts.com
*.edgardocambon.com
*.elapsedepoch.com
*.environmental-tn.com
*.eplfanbase.com
*.esopus.com
*.evesfoundation.com
*.foothillmotel.com
*.friendsofsies.org
*.fritzlans.com
*.lambdatauzeta.org
*.lesleytsina.com
*.matthewschoening.com
*.mikeosborn.com
*.neal-tec.com
*.thewarblergroup.com
*.thewarblergroup.net
*.variousthings.org
*.warblergroup.net
adamlima.com
aldosser.com
americanstrings.net
antiquesandmercantile.com
ariataylor.com
billcounts.com
billwinkler.com
brigbianchi.com
burroakknives.com
cardjazz.com
casanovacarriage.com
cfrassociates.org
checkerboardrecords.com
clonekit.com
clydesheets.com
communitycatcare.org
computer-prescriptions.com
computersimulation.org
cytographica.com
dakindproperties.com
dancingonmountaintops.com
danielwoods.com
daveharris.biz
defenderoftheflow.com
dmsindex.com
doncoomesart.com
doubleplatearts.com
edgardocambon.com
elapsedepoch.com
environmental-tn.com
eplfanbase.com
esopus.com
evesfoundation.com
foothillmotel.com
friendsofsies.org
fritzlans.com
lambdatauzeta.org
lesleytsina.com
matthewschoening.com
mikeosborn.com
neal-tec.com
thewarblergroup.com
thewarblergroup.net
variousthings.org
warblergroup.net

Other certificates including the domain name neal-tec.com

(limited to 100 certificates)
web07.tigertechnologies.net
*.neal-tec.com
*.extremenecessities.com
*.cobblp.org
web07.tigertechnologies.net
customers.tigertech.net
*.charityscribner.net
*.coastalbendstorage.com
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.solarismarketingnw.com
customers.tigertech.net
customers.tigertech.net
web07.tigertechnologies.net
web07.tigertechnologies.net
*.sanmateolumber.com
*.elkoutfitting.com
customers.tigertech.net
*.education-notes.com
*.offleashpr.com
*.halburns.com
*.moodybatch.co.uk
customers.tigertech.net
customers.tigertech.net
*.wigtrader.app
web07.tigertechnologies.net
*.windsorcarpetcleaners.co.uk
customers.tigertech.net
web07.tigertechnologies.net
customers.tigertech.net
customers.tigertech.net
*.telfordshropshirecarpetcleaners.co.uk
web07.tigertechnologies.net

Certificate

The complete raw certificate details for *.neal-tec.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wlF6Klu0djG8c+5SeUp
L7N+ejHU/fT2yivnlOWRX3nFqPgCr2PQofgXPSNK6XMbMLZUAUR1Mwx0XI9cp35h
QkqIyK/ekonNY1YBhH/X0ThI41X8UYdrCAsdrFvd0F4CQZnFw3k7B64WGdlYVUyx
sgSj4JwaFtUZoqc8uPuuY7JY8qWq1TdKAuT9EW5gik9yK1sD8q3GKH+Ofx6E/npz
jmNZuCR9QntAinRLbHmW+rcbKk2iZ6QRUAsIYdXByRt39JqAMFTwmCZr1Cd3SH6J
1HiIEhPoptD0Qa74xBhrAqDtzMUKUDWQ4b7cibJ4rSQCMnH/I2KDyyyQyPYsz5yi
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284032286155774651512337336329966276687952
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-04 04:38:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-03 04:38:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.neal-tec.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27650761514427149602033558811317846423207531556153438554187510783830505669673197512410116943173028157684872969702828790075113033339834758379576366116634491429824057950069752812888773121015244804462686950096095981115547671260512974887432280576810073398469123666507412683513098342118399040218130758183196571946608721694064927579899192393114819393786474948947108760406597093406235713436093498623941738664624220023524878123301456118276278304701546529991055038316670777107709752291633363287118960082885591993765727588309300066845799677100049170165435207833019534795880921481308954969360249412381206461707265996179963159279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ac1dda49f61a2b40e151e64e9617188146fe352
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1792 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamlima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aldosser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanstrings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antiquesandmercantile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ariataylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billcounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billwinkler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brigbianchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burroakknives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardjazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casanovacarriage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cfrassociates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.checkerboardrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clonekit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clydesheets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.communitycatcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.computer-prescriptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.computersimulation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cytographica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dakindproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dancingonmountaintops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danielwoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daveharris.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.defenderoftheflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmsindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doncoomesart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doubleplatearts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edgardocambon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elapsedepoch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.environmental-tn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eplfanbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esopus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evesfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foothillmotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendsofsies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fritzlans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lambdatauzeta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesleytsina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matthewschoening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mikeosborn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neal-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewarblergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewarblergroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.variousthings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warblergroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamlima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldosser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanstrings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiquesandmercantile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariataylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billcounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billwinkler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brigbianchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burroakknives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardjazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casanovacarriage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrassociates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkerboardrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clonekit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clydesheets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitycatcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computer-prescriptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computersimulation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytographica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakindproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancingonmountaintops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danielwoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daveharris.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defenderoftheflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmsindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doncoomesart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doubleplatearts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgardocambon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elapsedepoch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environmental-tn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eplfanbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esopus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evesfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foothillmotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsofsies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fritzlans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambdatauzeta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesleytsina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthewschoening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikeosborn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neal-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewarblergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewarblergroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'variousthings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warblergroup.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001628f29e9fb0000040300473045022100a8ab8dba7d692777cadb14802269e6c9404b519e11dff9b2e54bafd238b28ab902206c15460ef1eac3be5315a5d603740ee0e4c1734f00dc65880d84a1097beea504007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001628f29ea040000040300463044022006fba396fbb8bebb90e66a94157159298e56c8ec8dc377e8bd7571e57f6d4ec80220716fcfb23d1120a2d997fd34c1c742dc79ae61bbd0ac017efcc0961e9af079fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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