umec-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b5:c0:8b:48:43:47:26:d1:82:6d:1b:50:02:4c:e9:c1:14 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=umec-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:c0:8b:48:43:47:26:d1:82:6d:1b:50:02:4c:e9:c1:14
Serial Number (int): 323183901178088440731015374760952663228692
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:9d:58:62:c6:41:a5:b8:3d:c2:52:17:9d:63:45:5b:9d:8b:b0:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 82:26:4c:31:1b:a8:45:fe:81:8d:7d:b4:65:ab:ee:b1:de:40:4d:b8
Fingerprint (sha256): 0b:dd:93:eb:5e:5c:47:39:6b:c3:0d:de:b2:26:a5:df:bf:38:9d:8a:7a:36:6e:96:16:3b:be:10:09:7f:c4:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate umec-web.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for umec-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

123ip.be
8bed.com
acuscape.com
angimed.com
armeniamma.com
attorneyseniorcare.com
bettenhalle.de
bottegafantasia.com
caraccident-attorneys.website
cosmeticdentistpearland.com
deee-lite.space
erppeople.co.uk
etelescope.com
financialservicescompliance.com
fixnflipapprentice.com
givlingscam.org
hava.lease
hemcare.com
honeybadgerz.org
hviss.org
insectrepellent.organic
jointpainmobile.com
kingdomgod.com
laminated.org
makeup.organic
manhattanfuneralhome.com
masterstone.com
missourisportsmedicine.com
mobileregenerativemedicine.com
nab.melbourne
neochara.store
nhe1.com
nosenada.com
pcc-web.com
pointzerosoftware.com
postal1.com
printforhumanity.org
purvana.com
siouxcitysportsmed.com
slot-machine.com.de
snoremachine.com
spiritdaycare.com
spiritdoll.org
stemcelljacksonville.com
sulfitesinwine.com
ultraread.com
umec-web.com
usprinters411.com
watchon.org
www.123ip.be
www.8bed.com
www.acuscape.com
www.angimed.com
www.armeniamma.com
www.attorneyseniorcare.com
www.bettenhalle.de
www.bottegafantasia.com
www.caraccident-attorneys.website
www.cosmeticdentistpearland.com
www.deee-lite.space
www.erppeople.co.uk
www.etelescope.com
www.financialservicescompliance.com
www.fixnflipapprentice.com
www.givlingscam.org
www.hava.lease
www.hemcare.com
www.honeybadgerz.org
www.hviss.org
www.insectrepellent.organic
www.jointpainmobile.com
www.kingdomgod.com
www.laminated.org
www.makeup.organic
www.manhattanfuneralhome.com
www.masterstone.com
www.missourisportsmedicine.com
www.mobileregenerativemedicine.com
www.nab.melbourne
www.neochara.store
www.nhe1.com
www.nosenada.com
www.pcc-web.com
www.pointzerosoftware.com
www.postal1.com
www.printforhumanity.org
www.purvana.com
www.siouxcitysportsmed.com
www.slot-machine.com.de
www.snoremachine.com
www.spiritdaycare.com
www.spiritdoll.org
www.stemcelljacksonville.com
www.sulfitesinwine.com
www.ultraread.com
www.umec-web.com
www.usprinters411.com
www.watchon.org
www.zakuska.com
zakuska.com

Other certificates including the domain name umec-web.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for umec-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHLT97iyUPAH5JFCuUM3
zFVNJeN84O4LMNv/ecalbcVPBZ9Yg5TlbSPOJgce1UveD6WSy+Co0q1SPPGp37XL
edVothdThwprWu0ZFe1mP0y0AMsYFqA+jOaEp0ex6tDiiTSNJFWvkXeL9NwKSm+B
XaA2T240yMOMH+yL2yLae91oNycaCFcUdGMSuGjPJfju+fcc/huQggahymAvkc8B
7YgjEPAHg/Urymq7/3riE6wIA9SHFwe7t1cydSqi+5bHUvf6bBBlZLJWCIkkLtfo
SI8yJVsMihH6QNZiRCpcPVkyPmT9YmtRd50oVFwMS0YLJNan6LSTCGv0BiL1zPsf
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323183901178088440731015374760952663228692
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-13 10:55:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 10:55:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'umec-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19244846151387654439640873374311672411615429572389699018654526681974420377032888665349513117268405193589431538601727690684299998242961065630521784645934509941734430196664511454143295470125048192403710795785413373971891858070594878207599293345940395595078670733112509879927695973942360411398850464580003613109024094789719443031761445117600183042738466973173131283180194282827939424777906772161589125914538939110196290390022006786485345268439690980893570637756454553345631810829252984426901377835418822135744433020973829570045234921180493985091955156399595639410421482099244012135213314392202572325391590614304686809057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd9d5862c641a5b83dc252179d63455b9d8bb09d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2034 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123ip.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8bed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acuscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angimed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armeniamma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attorneyseniorcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettenhalle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bottegafantasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caraccident-attorneys.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmeticdentistpearland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deee-lite.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erppeople.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etelescope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialservicescompliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixnflipapprentice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givlingscam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hava.lease'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeybadgerz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hviss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insectrepellent.organic'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingdomgod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laminated.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeup.organic'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhattanfuneralhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missourisportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nab.melbourne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neochara.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhe1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nosenada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcc-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointzerosoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postal1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printforhumanity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purvana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siouxcitysportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-machine.com.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snoremachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritdaycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritdoll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcelljacksonville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sulfitesinwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultraread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umec-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usprinters411.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123ip.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.8bed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acuscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angimed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.armeniamma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attorneyseniorcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettenhalle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bottegafantasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caraccident-attorneys.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosmeticdentistpearland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deee-lite.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erppeople.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etelescope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financialservicescompliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixnflipapprentice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givlingscam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hava.lease'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honeybadgerz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hviss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insectrepellent.organic'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingdomgod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laminated.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeup.organic'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manhattanfuneralhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missourisportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobileregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nab.melbourne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neochara.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhe1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nosenada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcc-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointzerosoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postal1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printforhumanity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purvana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siouxcitysportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slot-machine.com.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snoremachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritdaycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritdoll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcelljacksonville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sulfitesinwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultraread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umec-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usprinters411.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watchon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zakuska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zakuska.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016beb304d3e000004030046304402202abf188875afa8ae0004380ca137f6386998c2955026133f0bc56f6e4c6b421602200c1cba16910ddd1997157bdb4d7da1449df713da8b1c4f68ed73555a7637af2b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016beb304ccc0000040300473045022100e25ab0b03883c435199e41e47d05a0410c1cd7689423505391e38850da8ab9fd02202adb4e2500008f6d4dcbbf909be4726cf30d6ce01ea59f1cf05b5dc233c7a7cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00539155c0b2681f5ab4d7aafec96671c555d03c6508783344699762799dc70a338d444f5a5e28e1f4c5eb3d9108561618799c58129d44b9d0bc28102e05caadd30ac5169faf6bbeafd6b3f49dbbc3b3df3e9555b64bcd976920f3af54b7edae54166bc3be148c595fde72ce7bc9b3b651ea7accdfbfe6aef4898212fd242c3a4a9a6b250b5a1c3934cc9d5d72b8b7b47d1770507668c16d82cef359c417e36a617b5dceddf4d898809718ea034ba53ab2591841d1988a4a4d74fca1a677ad3938a3824c11125aef6664ef788b12d6fc0e1f2ad156731ecc09aeea9999ce63529f0403228a2a724fe0f513357cfc5ad0de6ab22507e301e324d9a61d8868253607