le2.pls.merkleinc.com

Issued by R3

About this certificate

This digital certificate with serial number 04:16:69:9b:68:69:e7:a3:0b:79:60:23:6f:33:a5:4a:06:c1 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=le2.pls.merkleinc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:69:9b:68:69:e7:a3:0b:79:60:23:6f:33:a5:4a:06:c1
Serial Number (int): 356075731662633365837760983622561550698177
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c4:3c:e7:96:12:f4:72:e8:75:bc:cd:9e:f7:73:bc:80:b9:6b:9e:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2a:19:0f:98:d2:a4:ea:28:a2:89:73:b8:b2:6b:f3:ab:d8:3e:11:cd
Fingerprint (sha256): 0a:e9:17:6f:d7:20:1d:15:79:98:07:c2:19:0f:ed:0a:01:d6:fc:35:e3:1c:7d:bd:b8:c8:ed:05:a9:50:c2:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate le2.pls.merkleinc.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for le2.pls.merkleinc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

75yearsofinnovation.cetaphil.com
artoftheburger.heinz.com
celebrationofgivingsweepstakes.cetaphil.com
culinarymagic.heinz.com
fruitfight.sourpatchkids.com
guest.starbucksforlife.ca
guest.starbucksforlife.com
invite.starbucksavie.ca
le2.pls.merkleinc.com
loveyourskinandwinsweeps.cetaphil.com
myskinstory.cetaphil.com
oscarmayerfest.oscarmayer.com
review.instasummersplash.ca
review.moneymartsummersplash.ca
review.moneymartsummersplash.com
review.mrlrpromotions.com
review.tccssummersplash.com
skinquiz.cetaphil.com
strangerthings.sourpatchkids.com
waitlist.starbucks.com
welcome.regions.com
www.110birthday.oreo.com
www.12daysofchexmas.com
www.20gsweeps.com
www.aarpmakeyourmove.com
www.actionhawaiigiveaway.com
www.advanceautoracetowin.com
www.babewinespintowin.com
www.basketballgamingpromotion.com
www.cafollowyourart.com
www.callmebettycrocker.com
www.caprisunsweepstakes.com
www.carharttpocketfullofpresents.com
www.carharttsweeps.com
www.cinnamojime.com
www.coffeeonlara.com
www.countdowntochexmas.com
www.courseherocollegegrit.com
www.dunkinextras.com
www.dunkinsavingstime.com
www.dunkinsummer.com
www.dunksweeps.com
www.dunkwithvelveeta.com
www.embraceyourinnerpanda.com
www.epicfamilygamingnight.com
www.flxscratchscore.com
www.fslvgiveaway.com
www.goodforthefuture2022.com
www.hallsoffamecontest.com
www.happyheartscheerios.com
www.hbcucrushcontest.com
www.instasummersplash.ca
www.itsyourtimetostein.com
www.jeudetestarbucks.ca
www.kawsmonsters.com
www.kraftflvrs.com
www.kraftheinzsaveearnwin.com
www.luckycharmslantern.com
www.mccafebrewercontest.com
www.mdlzfreerackpromo.com
www.michaelkorssweepstakes.com
www.moneymartsummersplash.ca
www.moneymartsummersplash.com
www.mottsdesigncontest.com
www.mrandmrstandroses.com
www.mrlrpromotions.com
www.myteacherwinscontest.com
www.nabiscobacktoschool.com
www.naturevalleybjssweeps.com
www.naturevalleyparkpasssweeps.com
www.nutstalgia.com
www.nuttytraditions.com
www.oreo110.ca
www.originwatersweepstakes.com
www.oscarmayerfest.com
www.ouimercibouquet.com
www.poweradesummersweeps.com
www.purinaforlife.com
www.sno-gurtboard.com
www.spendearnwin.com
www.starbucksprizeanddelight.com
www.tccssummersplash.com
www.tcp25daysofgiving.com
www.togetherwefan.com
www.triscuitmissingingredientsapplication.com
www.trulysummersweepstakes.com
www.unwraptheranch.com
www.walmartcollegecontest.com
www.wyndreferral.com
www.xboxplaysweepstakes.com

Other certificates including the domain name merkleinc.com

(limited to 100 certificates)
dx.merkleinc.com
le1.pls.merkleinc.com
lyncae.merkleinc.com
emea.secureshare.merkleinc.com
signon.merkleinc.com
lyncae.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
*.lner.merkleinc.com
promo.merkleinc.com
*.lookalike.m1.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www2.merkleinc.com
pipes.merkleinc.com
*.lookalike.m1.merkleinc.com
le2.pls.merkleinc.com
denvpn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
rmg-vpn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
vpn.merkleinc.com
www.apricot.merkleinc.com
allyreporting.merkleinc.com
le2.pls.merkleinc.com
*.merkleinc.com
*.jpostma-discovery.aws-sandbox.analytics-emea.merkleinc.com
merkury.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www.mission45.be
le1.pls.merkleinc.com
rmg-vpnbackup.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
code.test.pls.merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
merkleinc.com
le1.pls.merkleinc.com
next-ci.aws-aquila.analytics-emea.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
sonar.merkleinc.com
le2.pls.merkleinc.com
dx.merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
webmail.merkleinc.com
*.lookalike.m1.merkleinc.com
officewebapps.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
pegademo.merkleinc.com
merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
le1.pls.merkleinc.com
ci.jpostma-discovery.aws-sandbox.analytics-emea.merkleinc.com
pegademo.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
dx.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
lsweb2013-cn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
admin.buytime.network
sfbusae.merkleinc.com
lyncae-cn.merkleinc.com
le2.pls.merkleinc.com
pipeline.8bitpictures.com
lsweb2013-eu.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www2.merkleinc.com
le1.pls.merkleinc.com
vdidev.merkleinc.com
officewebapps.merkleinc.com
*.lner.merkleinc.com
aue1.xfer.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
lsweb2013-cn.merkleinc.com
maytecedillo.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com

Certificate

The complete raw certificate details for le2.pls.merkleinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EEGWGMOlGSxE37tOZsl
48aDj5Hdim3vF0PYH69XIHfIpF5/N2We013j4/1shV82dcCBq0+9gO1u65s1Trt7
qqUGnGOp0e7UK8dca0vPB1qxurzhXSV400lxuRkGTubi6QW6Z/p6tTVlc4Zau9uH
qyBFlTMcDVhitDF+otf0kDHKjAV1tzeDOliyJmC0/EpTFO4LE7mnkP5m/kB2VtdP
KppjbkU647X5hor/Xq416wryo+YeaqSSLFCUl1Nm03lEQMmh70G4xTe3Leiyl/ng
4T1IcvmGCNkeQ8s7dNji+icDbwQ5uHcBOZLr2xOjGOxl0WN40jTXOlgDjj7wjHuo
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356075731662633365837760983622561550698177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-09 20:03:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-08 20:03:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'le2.pls.merkleinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26289632350080241191827722211908580564730528934650385484785280640157191123994610183250038685656140485264950285086826701948363227317095226320534222692215551203240830317048647363983205920730436669414831283931747740683984664653407739369096763941303700808436741102094899164524471051627362005075831843709088013365591686228352996504066855762518737653620774649541943873061021324437658814116197255715319380262914379427011292746385639809776177168773405327259866618709009789075095432047972162204131660038573831985180194514638908957805637783877969194033620359141245850726247116346525270272175416738207724257788125853972325705827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c43ce79612f472e875bccd9ef773bc80b96b9e01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '75yearsofinnovation.cetaphil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artoftheburger.heinz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebrationofgivingsweepstakes.cetaphil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culinarymagic.heinz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fruitfight.sourpatchkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guest.starbucksforlife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guest.starbucksforlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invite.starbucksavie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'le2.pls.merkleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveyourskinandwinsweeps.cetaphil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myskinstory.cetaphil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscarmayerfest.oscarmayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.instasummersplash.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.moneymartsummersplash.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.moneymartsummersplash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.mrlrpromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.tccssummersplash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinquiz.cetaphil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strangerthings.sourpatchkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitlist.starbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.regions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.110birthday.oreo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12daysofchexmas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.20gsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aarpmakeyourmove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actionhawaiigiveaway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advanceautoracetowin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babewinespintowin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballgamingpromotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafollowyourart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callmebettycrocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caprisunsweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carharttpocketfullofpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carharttsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinnamojime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeeonlara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countdowntochexmas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courseherocollegegrit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunkinextras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunkinsavingstime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunkinsummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunksweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunkwithvelveeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embraceyourinnerpanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicfamilygamingnight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flxscratchscore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fslvgiveaway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodforthefuture2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallsoffamecontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happyheartscheerios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcucrushcontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instasummersplash.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itsyourtimetostein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeudetestarbucks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kawsmonsters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraftflvrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraftheinzsaveearnwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luckycharmslantern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccafebrewercontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdlzfreerackpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelkorssweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moneymartsummersplash.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moneymartsummersplash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mottsdesigncontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrandmrstandroses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrlrpromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myteacherwinscontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nabiscobacktoschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturevalleybjssweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturevalleyparkpasssweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutstalgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuttytraditions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oreo110.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.originwatersweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oscarmayerfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouimercibouquet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poweradesummersweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purinaforlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sno-gurtboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spendearnwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starbucksprizeanddelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tccssummersplash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcp25daysofgiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherwefan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.triscuitmissingingredientsapplication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trulysummersweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwraptheranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walmartcollegecontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyndreferral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xboxplaysweepstakes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001832410705e000004030046304402204076482df536a585107e3a1adae15025ca11a79d4d05248cb6af8b863684287702206dbc6e728d5b58ed88a9aa1152c66adde75a60f4e7f94d2349074de84b4ad5af0077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001832410702f0000040300483046022100a742aaaed4979474f33750ba2487f1482241e4169cdb288f65c1d1b140b23991022100b422d75c5d524d30afa1e72c9147f6d214f68a4012a82e51d2c8f219a490fd10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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