www.galaktik.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:5d:49:3d:0e:e3:3f:35:5d:24:99:b7:1c:e6:48:f6:c7:e4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.galaktik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5d:49:3d:0e:e3:3f:35:5d:24:99:b7:1c:e6:48:f6:c7:e4
Serial Number (int): 380192754526447022582200571707748037085156
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:30:37:ed:96:a7:76:7a:21:90:81:f4:6d:0b:68:85:04:e5:32:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:25:92:5b:2f:9f:c7:f0:7f:00:65:96:70:e2:2e:56:4d:d6:e5:d6
Fingerprint (sha256): 18:66:a0:be:b9:db:62:57:c1:8f:8c:5c:9a:4f:02:cd:d5:ec:fc:bf:ee:07:22:4b:cd:9e:ff:c5:48:07:d9:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.galaktik.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.galaktik.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1000chan.org
8san.org
attenti.com
baltimorejointpain.com
bedding.co.com
bestwirelessfishfinder.com
boomerdude.com
brandtavern.com
brightcup.com
cakechan.org
camperteam.com
charmingline.com
chrisschneider.com
columbiaprp.com
coronatestsf.com
coronavirustestingsf.com
coronavirustestsf.com
digitalizeddollar.com
ditteautotrasporti.com
edgeoil.com
encontrar.org
fitnessfortheface.com
galaktik.com
houndchimp.com
idahoprp.com
internetofcoin.com
kitorren.com
laurengracesnyder.com
leos-tech.com
mediemail.com
mindonthemove.com
miriamcolon.com
netcollectible.com
ownthemark.com
perrini.com
positiveframe.com
randy-jackson.com
rapidfounder.com
reneeclark.com
ringstudio.com
solutionmade.com
sottosegretario.com
speedylistbuilder.com
stpetersburgcanna.com
stunpen.com
tacocasino.com
thatboomerdude.com
voglio.com
www.1000chan.org
www.8san.org
www.attenti.com
www.baltimorejointpain.com
www.bedding.co.com
www.bestwirelessfishfinder.com
www.boomerdude.com
www.brandtavern.com
www.brightcup.com
www.cakechan.org
www.camperteam.com
www.charmingline.com
www.chrisschneider.com
www.columbiaprp.com
www.coronatestsf.com
www.coronavirustestingsf.com
www.coronavirustestsf.com
www.digitalizeddollar.com
www.ditteautotrasporti.com
www.edgeoil.com
www.encontrar.org
www.fitnessfortheface.com
www.galaktik.com
www.houndchimp.com
www.idahoprp.com
www.internetofcoin.com
www.kitorren.com
www.laurengracesnyder.com
www.leos-tech.com
www.mediemail.com
www.mindonthemove.com
www.miriamcolon.com
www.netcollectible.com
www.ownthemark.com
www.perrini.com
www.positiveframe.com
www.randy-jackson.com
www.rapidfounder.com
www.reneeclark.com
www.ringstudio.com
www.solutionmade.com
www.sottosegretario.com
www.speedylistbuilder.com
www.stpetersburgcanna.com
www.stunpen.com
www.tacocasino.com
www.thatboomerdude.com
www.voglio.com
www.youngblackman.com
www.yoursupplyshop.com
youngblackman.com
yoursupplyshop.com

Other certificates including the domain name galaktik.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.galaktik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQBHXAs7vdAqy3Zh53m3
pZOgwW9oivczlFmQVLE9DZoaeZSv2uH8cmeqgSSvpajqH5DAwBpp8ynYRCRk2BhU
/k2gkLQs+NlYUSHlVtdgN3jRhjRQONLLnQlX1ixDIFgO6P+32pS+z9un41VqZTch
PQrPUlJ4lUumuJc5if1sXA8OllwyZYL5/XrJmnQesVBrWhtIOCUwsEl42gfME58p
aWPbDb2pF9MNGkx/zD8oE9JOEw6hIhuxx68e0YrXz3n1E76ZUhPyOyvXhtvXLzQX
wISvtfn0CIxHoXO/4gGA7K1cKOOd6+wY8E3vaPQksE+WVcBkjFWqdBQvVQa1UL51
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380192754526447022582200571707748037085156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 03:08:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 03:08:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.galaktik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24364130314323667669329313663531913915689946644278073086743508707051900263626365105647463132873096624904499444996950287583648306576778684766841077868429819754846026192780146448986778439568167553530852404674017016623033418178839566644017760021970448757311325785782751328925446919269277001185069452787430635991453858942973130806504782845519313589955108438496166861041823272534777132689358271600114055632068208652074944947716310448621927924990879835710345221603869749174565641569056795966084719012152586733492320855470623150130001961334527404663492116225571181332556215816632620027524959416085824834008675951176761374149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f23037ed96a7767a219081f46d0b688504e532c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1988 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1000chan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8san.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attenti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baltimorejointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedding.co.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestwirelessfishfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boomerdude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandtavern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightcup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cakechan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camperteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charmingline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisschneider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronatestsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirustestingsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirustestsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalizeddollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditteautotrasporti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgeoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encontrar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnessfortheface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galaktik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houndchimp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idahoprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetofcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitorren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurengracesnyder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leos-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindonthemove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miriamcolon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netcollectible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownthemark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perrini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'positiveframe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randy-jackson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidfounder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reneeclark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ringstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutionmade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sottosegretario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedylistbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpetersburgcanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stunpen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacocasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatboomerdude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1000chan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.8san.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attenti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baltimorejointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bedding.co.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestwirelessfishfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boomerdude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandtavern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightcup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cakechan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camperteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charmingline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrisschneider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiaprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coronatestsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coronavirustestingsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coronavirustestsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalizeddollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditteautotrasporti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edgeoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encontrar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitnessfortheface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galaktik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houndchimp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahoprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internetofcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitorren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laurengracesnyder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leos-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindonthemove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miriamcolon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netcollectible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ownthemark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perrini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.positiveframe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randy-jackson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rapidfounder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reneeclark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ringstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solutionmade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sottosegretario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedylistbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpetersburgcanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stunpen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tacocasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thatboomerdude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngblackman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yoursupplyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngblackman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoursupplyshop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017162465d4e0000040300463044022043727cf7b1844c96fd217e29b9a94724f1657ed7af62d5e84cc3bb49954fa61d02201490b62293773c23148c940aaaecd0345617803340c726927dfd0c8f45a23d6f007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017162465d3d000004030048304602210095ec18f1afdacd7dcff91290885c3921ab8281014f111e61b261e3989499baec0221009c7f524adc958ca81fc1ddcab2fd7d6f402440bd9d03aab8616334c54d283e60
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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