www.sagaatm.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:67:21:02:26:6a:09:a4:75:df:ea:39:1e:9f:98:7f:3b:8d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sagaatm.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:21:02:26:6a:09:a4:75:df:ea:39:1e:9f:98:7f:3b:8d
Serial Number (int): 383542103207485001967529950048234141334413
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3a:4a:ba:c1:ba:0b:d8:2e:f6:93:7c:78:66:d3:30:7c:a8:34:f6:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:8c:3e:a0:32:16:8a:03:d0:a4:5c:f7:8c:40:4e:38:b9:10:bb:5c
Fingerprint (sha256): 18:8d:30:5c:7b:cf:6a:44:d3:82:8a:de:69:e9:1b:7e:1f:e0:f5:e5:88:4a:db:2a:e7:4c:75:e5:b6:83:8e:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sagaatm.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sagaatm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

420nycroom.com
bandsource.com
boslab.com
bugsoff.org
centralairconditioningsystem.com
classifieds-america.com
consolidationsinc.com
cryptocaffeine.com
deertick.org
dmshub.com
domaindrawing.com
domainnameindustry.org
domainpontiff.com
dublinmma.com
eatmyfood.com
essentialblockchain.com
fixka.com
gmofoodguide.com
handbagmarketplace.com
hempmedicare.com
hiyoki.com
jolthotsauce.com
jordancurve.com
lansingsportsmed.com
leafdome.com
loanaccountingsoftware.com
marshall.mba
mosquitokryptonite.com
nancysshippen.com
ohiojointpain.com
paintballrifle.com
pinkmill.com
poolbuildersvirginia.com
premier.fish
propertyvienna.com
proxyhire.com
reppubblica.com
richmondscreenprinting.com
rxswim.com
sagaatm.com
simplymexican.com
siouxfallssportsmedicine.com
skitravelguide.com
sportsmedicineiiowa.com
sportsmedicinenebraska.com
themandolinian.com
tombigbeetree.com
verifywine.com
vestaviahillsdental.com
windbloom.com
www.420nycroom.com
www.bandsource.com
www.boslab.com
www.bugsoff.org
www.centralairconditioningsystem.com
www.classifieds-america.com
www.consolidationsinc.com
www.cryptocaffeine.com
www.deertick.org
www.dmshub.com
www.domaindrawing.com
www.domainnameindustry.org
www.domainpontiff.com
www.dublinmma.com
www.eatmyfood.com
www.essentialblockchain.com
www.fixka.com
www.gmofoodguide.com
www.handbagmarketplace.com
www.hempmedicare.com
www.hiyoki.com
www.jolthotsauce.com
www.jordancurve.com
www.lansingsportsmed.com
www.leafdome.com
www.loanaccountingsoftware.com
www.marshall.mba
www.mosquitokryptonite.com
www.nancysshippen.com
www.ohiojointpain.com
www.paintballrifle.com
www.pinkmill.com
www.poolbuildersvirginia.com
www.premier.fish
www.propertyvienna.com
www.proxyhire.com
www.reppubblica.com
www.richmondscreenprinting.com
www.rxswim.com
www.sagaatm.com
www.simplymexican.com
www.siouxfallssportsmedicine.com
www.skitravelguide.com
www.sportsmedicineiiowa.com
www.sportsmedicinenebraska.com
www.themandolinian.com
www.tombigbeetree.com
www.verifywine.com
www.vestaviahillsdental.com
www.windbloom.com

Other certificates including the domain name sagaatm.com

(limited to 100 certificates)
www.sagaatm.com
www.loanaccountingsoftware.com
www.poolbuildersvirginia.com
versantinc.com
sagaatm.com
washingtondctitlecompany.com
bigbangastro.com
eatmyfood.com
www.sydneyventurecapital.com
www.disposalco.com

Certificate

The complete raw certificate details for www.sagaatm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmXpgv0c5NBYkLRJhAHu
SsRJMEMR4j6+dINIxk0Bs5A+Ux8nykIW/QPj1o/aNXm9RWu70QUh03MNQnAh86B/
WZrytVeXuj/BsRGx9i86rLU2AKAx6NP+XJPEPvNaXZKSCUOf8E4bRRs1ZjOTCxu6
G7kQk5VpzSSG5bOjdmmq9m4rjxfvbQNnFCllJQkK75+YyHMZEBWS8kumNrov80z7
nVMgFIDQENF1GBGxxgpHjYUVGhkoAixvuKK+iYdcx7nAu6qcPgkEk+chqVWdtB78
mLyvMYiQZxX33pPwQJr94Ag3AIGYkC8klO79PYUXcAEMdlSfUVpLl6gmJspnVHoY
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383542103207485001967529950048234141334413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 05:15:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 05:15:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sagaatm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25045439139920320709765955272663028115296126530912819027035391192825053087935999687593861846094339378966606151805241494873064453241583077982858084732887693520432333806620974281927220571715984081515871324067873089942819396890020927125974439872273541046786441937454634833362224438220680065121203089733422206033813487541118397912525729478423270240728754487757643442415971624599080992056673155428384516569982330149999957048281388528726452146205848343573435178868108673221022357153530929903433563683283248425694979988635962095722802276599643781922407940055190806516670695755809510753677791857142142762854386911132539033791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a4abac1ba0bd82ef6937c7866d3307ca834f65e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '420nycroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugsoff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralairconditioningsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classifieds-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consolidationsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptocaffeine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deertick.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domaindrawing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainnameindustry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainpontiff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dublinmma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatmyfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essentialblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmofoodguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handbagmarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempmedicare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiyoki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jolthotsauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordancurve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lansingsportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leafdome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loanaccountingsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshall.mba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosquitokryptonite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nancysshippen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohiojointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paintballrifle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkmill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poolbuildersvirginia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertyvienna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxyhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reppubblica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondscreenprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagaatm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplymexican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siouxfallssportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skitravelguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicineiiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinenebraska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themandolinian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tombigbeetree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifywine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vestaviahillsdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windbloom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.420nycroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bandsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugsoff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralairconditioningsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.classifieds-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consolidationsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptocaffeine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deertick.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domaindrawing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domainnameindustry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domainpontiff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dublinmma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eatmyfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essentialblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmofoodguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handbagmarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hempmedicare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiyoki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jolthotsauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jordancurve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lansingsportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leafdome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loanaccountingsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marshall.mba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosquitokryptonite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nancysshippen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohiojointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paintballrifle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinkmill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poolbuildersvirginia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propertyvienna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proxyhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reppubblica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richmondscreenprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rxswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sagaatm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplymexican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siouxfallssportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skitravelguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicineiiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinenebraska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themandolinian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tombigbeetree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verifywine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vestaviahillsdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windbloom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170cd627880000004030047304502205afa6a1be1a07b366720aba71609574e3baed3076a2ff79d63812be7ad86a8680221008375ce7a5aca82a53ae5f4a11ff05e62e755087110c83b4b28c717696ac8a94700770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170cd6278b20000040300483046022100a9379207e2f85dfa752f3678c00afcc11d9257a5164fd3682782755bf6f3b2d6022100ab0373379ef077da1d7f60832a32d7a8ce411d52af1f29f0b98868cdb6a9811b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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