www.galaktik.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f9:4c:e9:ad:4c:a7:52:b9:98:b6:75:78:27:c9:23:00:67 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.galaktik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f9:4c:e9:ad:4c:a7:52:b9:98:b6:75:78:27:c9:23:00:67
Serial Number (int): 433281687738132341997889310205807792685159
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bd:48:b7:cf:c8:9e:77:7c:a4:41:fd:fa:43:c2:ae:5d:ba:26:d3:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:70:ee:8c:26:0c:08:18:84:29:22:84:27:b9:f2:02:a5:2f:fb:7e
Fingerprint (sha256): 13:3f:3d:cc:e2:8d:44:61:03:ae:b0:ef:ce:d8:43:d6:a1:16:b5:e0:31:e6:a7:47:79:e9:80:2e:c8:67:62:ad

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.galaktik.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.galaktik.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

420nyccafe.com
alankeith.com
attenti.com
australianrealestate.mobi
bratcher.org
cannabisnode.com
choconline.com
denvercorporatecatering.com
ditteautotrasporti.com
exactmark.com
fitnessfortheface.com
galaktik.com
goalspecific.com
hempcutting.com
internetwale.com
kitirc.com
labuanoffshore.com
levelupgaming.com
lifestyleunboxed.com
limousinemagazine.com
live-aid.com
louisvillefirewood.com
loveyolife.com
matchthink.com
mindonthemove.com
neommena.com
netcollectible.com
nevadacleaningservice.com
newrefinancehomemortgage.com
perrini.com
phonenumberforwarding.com
poshmi.com
prpindiana.org
prpnevada.com
pumpsforapurpose.com
quienquiere.com
raleighsportsmedicine.com
risk-insurance.com
rixeyville.com
sistemisorveglianza.com
stakingrig.com
stemcellcartilage.com
stemcelljacksonville.com
surfersparadisewhalewatching.com
todaysnews.world
tulsasportsmed.com
urbanshepherd.com
webuycarshere.org
www.420nyccafe.com
www.alankeith.com
www.attenti.com
www.australianrealestate.mobi
www.bratcher.org
www.cannabisnode.com
www.choconline.com
www.denvercorporatecatering.com
www.ditteautotrasporti.com
www.exactmark.com
www.fitnessfortheface.com
www.galaktik.com
www.goalspecific.com
www.hempcutting.com
www.internetwale.com
www.kitirc.com
www.labuanoffshore.com
www.levelupgaming.com
www.lifestyleunboxed.com
www.limousinemagazine.com
www.live-aid.com
www.louisvillefirewood.com
www.loveyolife.com
www.matchthink.com
www.mindonthemove.com
www.neommena.com
www.netcollectible.com
www.nevadacleaningservice.com
www.newrefinancehomemortgage.com
www.perrini.com
www.phonenumberforwarding.com
www.poshmi.com
www.prpindiana.org
www.prpnevada.com
www.pumpsforapurpose.com
www.quienquiere.com
www.raleighsportsmedicine.com
www.risk-insurance.com
www.rixeyville.com
www.sistemisorveglianza.com
www.stakingrig.com
www.stemcellcartilage.com
www.stemcelljacksonville.com
www.surfersparadisewhalewatching.com
www.todaysnews.world
www.tulsasportsmed.com
www.urbanshepherd.com
www.webuycarshere.org
www.xn--f2baa.com
www.zippyme.com
xn--f2baa.com
zippyme.com

Other certificates including the domain name galaktik.com

(limited to 100 certificates)
www.galaktik.com
www.galaktik.com
importica.com
www.sparkling-wine.com
www.orlandostemcell.com
www.urban-safari.com
galaktik.com
wneco.com
www.caminoalexito.com
www.unprecedentedfavor.com
mulberryriverhemp.com
live-aid.com
buymarijuanaproducts.com
www.kwikkopyprinting.com
levelupgaming.com
attenti.com
www.tacocasino.com
nolite.com
hotelisarenas.com
www.fitnessfortheface.com
www.scienceandmeditation.com
theoffroadmusicfestival.com
www.bratcher.org
galaktik.com

Certificate

The complete raw certificate details for www.galaktik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4H+xjxnPW+U8iIMkrGi
mSY4qGOPdhhxqAunDo9qZbptYi7KYP86c48oMsjqv0ruDhnzL8ugofgs+ZH7kitE
j5cFLb5tj9mfhGUS4XuPFqy0oDOsuGdcaPukIq0ACR2Kh2u7tLT/9m9Mk6ofFLyp
tJAiS9N7ljmUxgjg/7kgEXSRCo4ipd+LBJ8RD0RGBSSlp2ppJaBw6Njm5to+/6g5
S7iMqAPQo3NSJkqD4ukHcAjNb0OyR8kMojz92/XHSB5cYjItPBN/j2K9lXE8lO67
9qc7J2d3I08LH2CNTShr5LthQuCNCCLxZEMhvxXas92CdxSv3yQArL7B1mBuSJcj
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433281687738132341997889310205807792685159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 08:02:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 08:02:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.galaktik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22155806397417969679981874997922300432137251241949279341440255569807756861401176113231541619299079259756294824855281065156293231548711046025894798731204676439533292447567057862109672126467245021767873630604457088160402926446535232706137781749424716538547801241177847828588748490589255491608472773084104234930224489751109854821775358371172763495433955306121443042875094462574378401001092437929523974532395649866846045990039143105755617078315899819921524523350452232705627699417905188739195425494065171354604607013078118451166940734216133284656019845641204023792449855950690901734145884906365681293442449483862017254181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd48b7cfc89e777ca441fdfa43c2ae5dba26d323
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '420nyccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alankeith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attenti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australianrealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bratcher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisnode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denvercorporatecatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditteautotrasporti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exactmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnessfortheface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galaktik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goalspecific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempcutting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetwale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitirc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labuanoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levelupgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestyleunboxed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limousinemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-aid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisvillefirewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveyolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matchthink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindonthemove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neommena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netcollectible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevadacleaningservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newrefinancehomemortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perrini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonenumberforwarding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poshmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpindiana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpnevada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pumpsforapurpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quienquiere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleighsportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risk-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rixeyville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistemisorveglianza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stakingrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellcartilage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcelljacksonville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfersparadisewhalewatching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaysnews.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulsasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanshepherd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webuycarshere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.420nyccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alankeith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attenti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australianrealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bratcher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannabisnode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denvercorporatecatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditteautotrasporti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exactmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitnessfortheface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galaktik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goalspecific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hempcutting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internetwale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitirc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labuanoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levelupgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifestyleunboxed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limousinemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live-aid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisvillefirewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loveyolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matchthink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindonthemove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neommena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netcollectible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevadacleaningservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newrefinancehomemortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perrini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phonenumberforwarding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poshmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prpindiana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prpnevada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pumpsforapurpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quienquiere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighsportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.risk-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rixeyville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sistemisorveglianza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stakingrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellcartilage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcelljacksonville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfersparadisewhalewatching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.todaysnews.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulsasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urbanshepherd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webuycarshere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--f2baa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zippyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--f2baa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zippyme.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700a49dfbc000004030047304502200c4dcf0bb16af00e3b5f6f1114c43b963c75e695fa8847e9a79bc89cb3ef5a89022100d549406ed0223f1c292d030f2f7495c1dd6c9852c8da42c52a2472752e5bf8bc007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700a49dfb40000040300473045022100d22e11fd01932015f290cd8c75552186eb37da25d0799e7e0cc27672e43fcc1402206e7156a7c5ce23802a6132c411cccc60bc4691c450a2fe29b9fa33779281377f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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