champagne.fund

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:be:07:fd:4e:88:62:fe:e8:d9:45:c7:15:f1:81:32:a5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=champagne.fund

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:be:07:fd:4e:88:62:fe:e8:d9:45:c7:15:f1:81:32:a5
Serial Number (int): 307867854499477150770363416339769911751333
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:bc:dd:3a:f2:72:49:dc:05:ec:82:9c:52:f5:8b:f9:14:34:7c:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:3b:76:a5:d7:75:26:65:04:44:f6:68:0c:b2:24:ea:3f:cc:f5:09
Fingerprint (sha256): 0b:e9:a8:29:4a:d9:74:f7:fb:3a:a6:3c:67:08:5b:a5:74:2c:fc:8e:5a:27:b9:d2:f4:0e:33:54:7c:52:18:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate champagne.fund

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for champagne.fund

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

34416.com
34719.com
34796.com
34814.com
34881.com
40697.com
42984.com
43161.com
46092.com
47761.com
47806.com
487.me
69084.com
69164.com
69473.com
69480.com
70225.com
71607.com
90786.com
alzheimersgroups.org
bascia.com
battipaglia.org
casinocarbonara.com
champagne.fund
dakotaoillease.org
dejan.org
dementiapreventionstudy.org
esportsdhaka.com
healthydietformula.com
homeloan.miami
hsbc.melbourne
indocina.com
jointpaincarolina.com
jointpainnorthdakota.com
joysmith.life
mmaespana.com
mongoliamma.com
newbornformula.com
no-va.com
peschechera.com
sanmaurotorinese.org
sfogliaantica.com
stefy.org
stemcellmaryland.org
stemcellsanjose.org
terzigno.org
tramatza.com
transfermatic.com
treatmentforasthma.com
usarealestate.mobi
www.34416.com
www.34719.com
www.34796.com
www.34814.com
www.34881.com
www.40697.com
www.42984.com
www.43161.com
www.46092.com
www.47761.com
www.47806.com
www.487.me
www.69084.com
www.69164.com
www.69473.com
www.69480.com
www.70225.com
www.71607.com
www.90786.com
www.alzheimersgroups.org
www.bascia.com
www.battipaglia.org
www.casinocarbonara.com
www.champagne.fund
www.dakotaoillease.org
www.dejan.org
www.dementiapreventionstudy.org
www.esportsdhaka.com
www.healthydietformula.com
www.homeloan.miami
www.hsbc.melbourne
www.indocina.com
www.jointpaincarolina.com
www.jointpainnorthdakota.com
www.joysmith.life
www.mmaespana.com
www.mongoliamma.com
www.newbornformula.com
www.no-va.com
www.peschechera.com
www.sanmaurotorinese.org
www.sfogliaantica.com
www.stefy.org
www.stemcellmaryland.org
www.stemcellsanjose.org
www.terzigno.org
www.tramatza.com
www.transfermatic.com
www.treatmentforasthma.com
www.usarealestate.mobi

Other certificates including the domain name champagne.fund

(limited to 100 certificates)

Certificate

The complete raw certificate details for champagne.fund in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH7PiRSaOIxj+uEncWqm
ikaTBJ/np0vCFv6+79ridzwJI41ZVlKZslnN2q7MfOZ1qB2xwvTJ0jy41s0Yvyuo
QzzJoJkJDRr7ho641vJDqc+sLgNqGl3wy4SJAp6REPBjv252MCtx1jdXSXQn31LD
sM91AZdf3l2EHzRnrdaIVUZgB4CzXuhmvYeQjwl928PbCrDE2hOzIBsiHOeF/JaK
GjrRFSDVge/+/zPVN9e+8S2xL1CFb7McR3gFWS9AvVwNlZKMUIVPUm4BY01d67v6
LArAIxu+ibY+nXiV9PS5qxrK7ikLfUIKED8taayvq8lL/0yPWcrDnDk78ZznT8gi
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307867854499477150770363416339769911751333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 01:53:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 01:53:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'champagne.fund'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23290380793366241948187109692230977976260703513508433723002816144363278641042847196521262161304503936458898614662736679898624884560572041504583388213696106196397333536766057180193326979962318832622931681055106908671099997204794823374893676812128301391149288457128677489748319683568980407984413148137240180289849521081430082867896982708033577929216322099996576620082705063633488481181689873156574865984295544559119519078071677403295006615713019927230695467428048088815487835068521948710191493498366718411039510906902728728691659664270689701122573042077247282820540581287429993092150342740786100651642501195333932425921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dbcdd3af27249dc05ec829c52f58bf914347cbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1748 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '34416.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '34719.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '34796.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '34814.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '34881.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '40697.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '42984.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '43161.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '46092.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '47761.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '47806.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '487.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '69084.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '69164.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '69473.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '69480.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '70225.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '71607.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '90786.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alzheimersgroups.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bascia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'battipaglia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinocarbonara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champagne.fund'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakotaoillease.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dementiapreventionstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esportsdhaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthydietformula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeloan.miami'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbc.melbourne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indocina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpaincarolina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainnorthdakota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joysmith.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmaespana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mongoliamma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbornformula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'no-va.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peschechera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanmaurotorinese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfogliaantica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellmaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellsanjose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terzigno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tramatza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfermatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treatmentforasthma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usarealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.34416.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.34719.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.34796.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.34814.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.34881.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.40697.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.42984.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.43161.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.46092.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.47761.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.47806.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.487.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.69084.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.69164.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.69473.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.69480.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.70225.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.71607.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.90786.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alzheimersgroups.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bascia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.battipaglia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinocarbonara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champagne.fund'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dakotaoillease.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dejan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dementiapreventionstudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esportsdhaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthydietformula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeloan.miami'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsbc.melbourne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indocina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpaincarolina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainnorthdakota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joysmith.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmaespana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mongoliamma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newbornformula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.no-va.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peschechera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanmaurotorinese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfogliaantica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stefy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellmaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellsanjose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terzigno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tramatza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transfermatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treatmentforasthma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usarealestate.mobi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a149dacec0000040300463044022004cf77e8d41283ef76d0403f2b325dc70fd8235b4143a8e78e5bf94d0d7a3109022039bf1c01fb936a643da28a59ee08ed3f35051b295596e8a3475998254192d32600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a149dad3a0000040300473045022048e9eedb2a420a9ae0f3bc0f1b3d07f685a3a5145d94ada526171738b0c6676a02210083197b0f2977e45cef65eaf45def154f4a663f0f99dbace191fd462790eca97d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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