*.simpleharvestreads.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:63:90:0a:ea:2b:c2:83:ce:cc:94:2c:2b:a3:9e:4d:db:13 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.simpleharvestreads.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:90:0a:ea:2b:c2:83:ce:cc:94:2c:2b:a3:9e:4d:db:13
Serial Number (int): 382328563556126365383717382066435034831635
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e1:04:dd:5d:05:a8:9e:69:56:14:95:1a:77:0f:39:e5:13:6a:16:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:de:58:ec:cc:b8:40:75:06:c9:6c:6b:61:2b:e8:22:02:e0:c1:1b
Fingerprint (sha256): 19:c4:d7:aa:a3:36:f3:6a:64:fa:5d:02:bb:09:96:c9:9b:46:03:74:75:85:6e:79:29:51:ed:05:02:d3:6a:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.simpleharvestreads.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.simpleharvestreads.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alexanderwellness.com
*.awesomemathgirls.org
*.chkingston.org
*.climateequityreference.org
*.connectingresources.org
*.cpred.com
*.creativecounselaz.com
*.dnaahead.com
*.erikpkraft.com
*.familypress.org
*.farmvillecpa.com
*.garystravels.com
*.gideonlabs.com
*.greenlightdevelopment.com
*.gunnergooner.com
*.highbridgesprings.com
*.hudsonvalleyfieldtrips.com
*.inspiredflooringdesign.com
*.iriasironworks.com
*.jpchemicalsonline.com
*.jpequipmentonline.com
*.jpequipmentsales.com
*.jpgranitize.com
*.kalosagon.org
*.lakeunionconsulting.com
*.oregonglassguild.org
*.pacificflyingfish.com
*.pegfisher.com
*.qualityjump.net
*.qualitylife.rocks
*.restorativeadventures.com
*.riovistawines.com
*.riverwalkinnlakechelan.com
*.seesummit.com
*.sierrawebsites.com
*.simpleharvestreads.com
*.smittystireandtruckservice.com
*.solarharmonics.com
*.superasianfood.com
*.tradesnipits.com
*.trendingfootballnews.com
*.zapjab.com
alexanderwellness.com
awesomemathgirls.org
chkingston.org
climateequityreference.org
connectingresources.org
cpred.com
creativecounselaz.com
dnaahead.com
erikpkraft.com
familypress.org
farmvillecpa.com
garystravels.com
gideonlabs.com
greenlightdevelopment.com
gunnergooner.com
highbridgesprings.com
hudsonvalleyfieldtrips.com
inspiredflooringdesign.com
iriasironworks.com
jpchemicalsonline.com
jpequipmentonline.com
jpequipmentsales.com
jpgranitize.com
kalosagon.org
lakeunionconsulting.com
oregonglassguild.org
pacificflyingfish.com
pegfisher.com
qualityjump.net
qualitylife.rocks
restorativeadventures.com
riovistawines.com
riverwalkinnlakechelan.com
seesummit.com
sierrawebsites.com
simpleharvestreads.com
smittystireandtruckservice.com
solarharmonics.com
superasianfood.com
tradesnipits.com
trendingfootballnews.com
zapjab.com

Other certificates including the domain name simpleharvestreads.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.simpleharvestreads.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbUZID2tiF2SGnvHNJF1
NjuMZlTlO1P065z4XuVlPoKT8lvxqSfZMyyYAn0B768y50QhMBeYdIup/JUfjRZS
3Ddfokq2Hl3oC/FFmXpSxm/pDPnQJk95IvXJziGqam9NpuVrXoRR1g09c0Ts8EO7
qmqD/P5HqZJdqcoImDBYBAAFdtyOiJS/Eaa5DZXzG2YgBMXsM85Zze9vDsqSrlBN
eJw+O2lxPknea3cYt9nI8oFtl+8Xp3NN+lPPKWnQXPKl1ZSC6YYvXcr1z4bj9vgS
2i3yIA6gvECkVuoXtmpWmY3IN3YxeJ3NDiMycgLL2oWxkNV0El1Ymiy5p3g/PF7E
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382328563556126365383717382066435034831635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-18 08:14:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-16 08:14:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.simpleharvestreads.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22433482804235389991372466963032475268422776637501221706805808108443276405408086437007123520790351795026189291767800519952191080351077113062946575016952581007871834121250379986628030630601404241394487980401038766242137969403421884610258149199476502122119391511766373396475652704821989943909217521435231363471416277095685826482988715268061549264213687752663693291406993137602363932318579986407878519464750335084686306942068133317589642996889718218919880973140952023382351499833769059461446082139745390977799394744787732344562886686192277935009501418437943815561782055176733895829969045224011228570384774865594454295787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e104dd5d05a89e695614951a770f39e5136a16e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexanderwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awesomemathgirls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chkingston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.climateequityreference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectingresources.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativecounselaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnaahead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erikpkraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familypress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmvillecpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garystravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gideonlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenlightdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gunnergooner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highbridgesprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hudsonvalleyfieldtrips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inspiredflooringdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iriasironworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jpchemicalsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jpequipmentonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jpequipmentsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jpgranitize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalosagon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lakeunionconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oregonglassguild.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificflyingfish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pegfisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualityjump.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualitylife.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restorativeadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riovistawines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riverwalkinnlakechelan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seesummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sierrawebsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simpleharvestreads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smittystireandtruckservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solarharmonics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superasianfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradesnipits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendingfootballnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zapjab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexanderwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awesomemathgirls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chkingston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climateequityreference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectingresources.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativecounselaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnaahead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erikpkraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familypress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmvillecpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garystravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gideonlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlightdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunnergooner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highbridgesprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudsonvalleyfieldtrips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspiredflooringdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iriasironworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpchemicalsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpequipmentonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpequipmentsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpgranitize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalosagon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakeunionconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oregonglassguild.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificflyingfish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pegfisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityjump.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualitylife.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restorativeadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riovistawines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverwalkinnlakechelan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seesummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierrawebsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpleharvestreads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smittystireandtruckservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarharmonics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superasianfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradesnipits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendingfootballnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zapjab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001637287665d0000040300473045022100ddd5f3f348be8ae38a2eefd468647f12434210dc3c9ca3d85f39dfa22e860ace022061ebab313224e45865442231fb6d52dcb6a199ebf5891da3b55ee78f2a4223700077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000163728766ae000004030048304602210085c6917ed79056461c58c1e6a892541bb3441e088c349d9a6e82159c2fac7d6f02210099e8cf7614d534d70e58758ae33965ceb76f52453aa74f4c397c7d1abd37823e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0039cc4a0c0b129a2c24115dc6b39dca8a2549fed89b89ac697bc80c172f850a432488bd20494792079ced66f351806bdcbfe002e2ca9004f67fbe59831008dee93c76a3b05a3257ca047c1f3a65b27ce6d9a31eae12cad8e89ac4d2bee002b3947282e7971761281082ce68909ebd146c967d9ce57c67cb1faa7aa98edb4dbc1f396efb2593c2ed5a14499d871f6a62f26c53a68a325ea88cf87e148bc4e7440dfe959712533e61e40798e392b4dd3b7d28edeb857d0010b6ed433c5400b684a7a43dca7ef1f348167d94654f531b0b4d8cfcf6eb1b5860eec118e8f837458dbdcc12d15667448baccfaf933387d7c26944fc7a5c626959fd329a72042e0a6e24