biodynamicchampagne.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:ea:44:a5:5d:20:c7:89:67:58:04:02:72:bd:e8:7a:9a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=biodynamicchampagne.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:ea:44:a5:5d:20:c7:89:67:58:04:02:72:bd:e8:7a:9a
Serial Number (int): 293975078433945893113205671829973521431194
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:a2:9a:b0:5e:29:cd:a2:42:bc:df:5e:98:c9:eb:c1:50:4d:04:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:7d:0d:e2:f7:00:6b:9a:7c:36:5e:b3:c1:68:fd:80:b3:61:2c:65
Fingerprint (sha256): 19:fd:26:1e:ac:50:86:81:f2:89:2c:ac:89:ee:77:fe:6a:21:f8:5f:e3:05:86:82:fb:91:df:ff:5a:26:c7:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate biodynamicchampagne.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for biodynamicchampagne.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acontifatti.com
adottati.com
aljoman.com
automatedwarehousing.com
bakedcooking.com
bellevuenaturopath.com
biodynamicchampagne.com
budtendersreserve.com
cableconstruction.com
cannabisdistirbute.com
chilled-case.com
chinabeacon.com
crazyn.com
deathvalleynationalpark.com
debttrapeducation.com
denverhospital.com
designtalk.com
durafan.com
dwatch.com
esportsgrandfinal.com
fanboyscum.com
freshafstarterpack.com
gcaco.com
iccbetting.com
internationalcowboypoetryassociation.com
intonacatrici.com
masterbench.com
ortonadeimarsi.com
primaltraining.com
reyzen.com
safenaturalalternative.com
satcomcase.com
servizisiderurgici.com
stemcellslongbeach.com
stonecountybourbon.com
swissderm.com
talbo.com
technicalscan.com
tempe-locksmith.com
terravistalandscaping.com
thenewunschool.com
thingsnotspoken.com
tobaccystarterpack.com
treasuretrunk.com
treatswithoutgluten.com
uncommonsensical.com
vpaco.com
wartandmoleremoval.com
wholesalebabyclothing.com
windraven.com
www.acontifatti.com
www.adottati.com
www.aljoman.com
www.automatedwarehousing.com
www.bakedcooking.com
www.bellevuenaturopath.com
www.biodynamicchampagne.com
www.budtendersreserve.com
www.cableconstruction.com
www.cannabisdistirbute.com
www.chilled-case.com
www.chinabeacon.com
www.crazyn.com
www.deathvalleynationalpark.com
www.debttrapeducation.com
www.denverhospital.com
www.designtalk.com
www.durafan.com
www.dwatch.com
www.esportsgrandfinal.com
www.fanboyscum.com
www.freshafstarterpack.com
www.gcaco.com
www.iccbetting.com
www.internationalcowboypoetryassociation.com
www.intonacatrici.com
www.masterbench.com
www.ortonadeimarsi.com
www.primaltraining.com
www.reyzen.com
www.safenaturalalternative.com
www.satcomcase.com
www.servizisiderurgici.com
www.stemcellslongbeach.com
www.stonecountybourbon.com
www.swissderm.com
www.talbo.com
www.technicalscan.com
www.tempe-locksmith.com
www.terravistalandscaping.com
www.thenewunschool.com
www.thingsnotspoken.com
www.tobaccystarterpack.com
www.treasuretrunk.com
www.treatswithoutgluten.com
www.uncommonsensical.com
www.vpaco.com
www.wartandmoleremoval.com
www.wholesalebabyclothing.com
www.windraven.com

Other certificates including the domain name biodynamicchampagne.com

(limited to 100 certificates)
biodynamicchampagne.com
biodynamicchampagne.com
www.hvactesting.com
fargoregenerativemedicine.com
www.fargoregenerativemedicine.com
nyungwe.bible
www.chemicalcare.com
californiasportsmedicine.org
abeach.life
contactrecord.com
www.polybike.com

Certificate

The complete raw certificate details for biodynamicchampagne.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3erUkzo/CR5Jdd6f4zMv
OPpJX8CeR/k5yNLjj9Edhy7kvxPi+lMMLh0ApfYcbRc4pyugNsoWliB2/M+1Vdhp
GBUTutyiBrNfU/dNootMv929cPjVq/ReIqc1hj2LE/XzkaOaClhkv5csrFZlQpy/
NtrC0fl10ptGEa9ddnMhKfUr+OL8r997SNEko1RK3Z0n2WhPoby9s+qHIpNbkA9c
NzpTJV5PkifJjyujLtzSqc+46tfSNNr76UTA8pgW3RwspcfgxEkplF2NJy8jlaXv
XKJO0VbQcm/gU0NZZMIi9ol8IA5TAiW0Us6Yl+UuB5fkUsu2zUOopIn/P+GhaBSw
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293975078433945893113205671829973521431194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 12:22:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 12:22:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'biodynamicchampagne.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28014464569586627901237692523912405564283595428955200897823191888233126313217668961873496914864442114075994950687750684033971067479993382349626236844388584022695510769862028469145564187975476787084043209821623493503734030263174269681886426569240693896704340664273958768969966134221809263830936807516508435698166554027062755743554551610882323383466201390923423859446068639329755344624536296195857072923686419268038119249233971764134029834790616611723342371163929043698065061450937472682755293435885273665557103545270625318710795926807655483050517353874143682313219998773819696831590162008242983876546634808888348946467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2a29ab05e29cda242bcdf5e98c9ebc1504d0494
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2212 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acontifatti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adottati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aljoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automatedwarehousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakedcooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellevuenaturopath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biodynamicchampagne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budtendersreserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cableconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisdistirbute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilled-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinabeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deathvalleynationalpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debttrapeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durafan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esportsgrandfinal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanboyscum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshafstarterpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iccbetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalcowboypoetryassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intonacatrici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterbench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ortonadeimarsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primaltraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reyzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safenaturalalternative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satcomcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servizisiderurgici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellslongbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonecountybourbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissderm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalscan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempe-locksmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terravistalandscaping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenewunschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thingsnotspoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tobaccystarterpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treasuretrunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treatswithoutgluten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncommonsensical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wartandmoleremoval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesalebabyclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windraven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acontifatti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adottati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aljoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automatedwarehousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakedcooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellevuenaturopath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biodynamicchampagne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budtendersreserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cableconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannabisdistirbute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chilled-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinabeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crazyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deathvalleynationalpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.debttrapeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denverhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durafan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esportsgrandfinal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanboyscum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freshafstarterpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gcaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iccbetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationalcowboypoetryassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intonacatrici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterbench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ortonadeimarsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primaltraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reyzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safenaturalalternative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satcomcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servizisiderurgici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellslongbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stonecountybourbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissderm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technicalscan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempe-locksmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terravistalandscaping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenewunschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thingsnotspoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tobaccystarterpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treasuretrunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treatswithoutgluten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uncommonsensical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wartandmoleremoval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wholesalebabyclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windraven.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a54a948700000040300473045022069b81008d8ee26f09b2ff6bee13b44a8f28ea608da0678946872c2b6a68d4b09022100c7433ad2318d47a46bfd18906ffdc3d5e15147d281dbce4a7aeb91d82df5c928007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a54a94a73000004030048304602210081dc5ad380502fb52d482e937c621f5a52a7056620a1426ed228ead7df2892c60221008d98abc6a9b1cd58e785b5b93f4d80bd22f786bd40b976b87aee895ba18c46e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009cc26e16527cc7e43c83275810989e911576941b4450a3ff4dba84c590168c49f875b9bc3e68eaf9d3910063d0144869ff9fbcd9ffbf4d50caa25ac46ebd001e7164609b5bd0c564f63e6bbbaa92f3b005940a27455223b98fe70e40a4e692820a5e372782f58d941219cdd732efad997be13ad03cb7e93a0a202e89f6637f32c7ea5442344fc5466c0ec6eacc5adb02d8ac9d8c473ed8dadbd72e98886ee4398ba0259345407d7e658bd07369336a8737892d7d81b669f469661fd88eaf11de81a2a7da897691d82e807089e281781b9ac3e113d7a4f386b8f39b07f9d30f807b18bace1fb6a06f9e64b901b6f3b951c5d3f3d70cc8e75f48d98ca645894075