lists.iajgs.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:29:ee:87:95:2b:3e:d4:7b:5f:f6:a1:5c:3c:41:8b:5e:eb was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lists.iajgs.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:29:ee:87:95:2b:3e:d4:7b:5f:f6:a1:5c:3c:41:8b:5e:eb
Serial Number (int): 362717781019377462645691145659480334360299
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:3f:42:a9:5d:4a:1b:82:2d:2a:8a:1d:1f:e4:5f:74:7c:19:8d:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ed:ed:53:fb:ae:47:10:a5:d3:20:07:20:f4:d8:01:43:88:07:99:89
Fingerprint (sha256): 1b:08:42:05:25:47:00:f2:7f:57:1c:71:1f:8b:f5:45:74:98:2e:9b:41:28:35:3a:6a:93:d2:48:98:57:87:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lists.iajgs.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.iajgs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.iajgs.com
lists.iajgs.net
lists.improvplayworks.com
lists.indicant.net
lists.indoexpat.org
lists.indosoc.org.uk
lists.innerphysician.com
lists.innertruthmassage.com
lists.innosci.net
lists.integrativephysicaltherapyservices.com
lists.integrityusa.org
lists.internet-of-everything.fr
lists.interstell.com
lists.ipte.net
lists.irisarri.org
lists.israelaction.net
lists.israelaction.org
lists.italiansrus.com
lists.iucnosg.net
lists.jacobkaye.com
lists.jejuneinstitute.org
lists.jfmf.org
lists.jgsgb.com
lists.jgsgb.org
lists.jillmanning.com
lists.jkswineandliquor.com
lists.jmwauction.com
lists.jmwauctions.com
lists.joefgoodman.com
lists.joekowan.com
lists.joelpalmermusic.com
lists.joshuarich.com
lists.julieharrington.net
lists.jumpingrock.net
lists.justcomm.org
lists.justusnyc.org
lists.juvenilejusticeinformationexchange.com
lists.kalamazooacupuncturehealth.com
lists.kalamazooacupunctureoffice.com
lists.katzenfinch.com
lists.kazoologist.org
lists.keithavenue.org
lists.kempiweb.net
lists.kentest.com
lists.kentnerburn.com
lists.kigreene.com
lists.kingstoncigarshoppe.com
lists.kitbradley.net
lists.kokotele.net
lists.kokoteleguitarworks.com
lists.lacamas-shores.com
lists.lacamasshores-community.com
lists.lacamasshores.org
lists.lachoff.com
lists.lafayettekiwanis.org
lists.lagerrhythms.com
lists.lahaciendagaleria.com
lists.lajollabridge.com
lists.laposadadelriosonora.com
lists.larchmontumc.org
lists.laurelspringsmarietta.org
lists.lcn-news.org
lists.ldssinglesinseattle.com
lists.legacyhomecaretn.com
lists.leonard-harris.com
lists.lesleytsina.com
lists.lexvanewcomers.org
lists.lhoffman.com
lists.lindamichelet.com
lists.linwoodspiritual.org
lists.linwoodspiritualcenter.org
lists.linwoodspiritualctr.org
lists.llamasannyc.com
lists.lobsterbarnyc.com
lists.locallygrownnorthfield.org
lists.luckypet.com
lists.lylefire.com
lists.magnaenterprise.net
lists.malvernsweatlodge.com
lists.manet-routing.net
lists.margaretmcgaffeyfisk.com
lists.markgillardrealestatemarketeer.com
lists.marthamiller.com
lists.master-acn.fr
lists.master-comasic.fr
lists.master-rosalind-franklin.fr
lists.masters-herbrand.fr
lists.mattiedaughtry.com
lists.maubc.com
lists.maubc.org
lists.maxpartner.com
lists.medinacoogs.org
lists.memorial-umc.org
lists.menschworks.com
lists.mgstudios.biz
lists.znrcds.com

Other certificates including the domain name iajgs.com

(limited to 100 certificates)
web06.tigertech.org
lists.iajgs.com
*.josephoak.com
web06.tigertech.org
lists.wcaia.ca
lists.iajgs.com
lists.galvanys.com
*.dbcowboy.com
customers.tigertech.net
web06.tigertech.org
lists.iajgs.com
customers.tigertech.net
*.mojo40.com
*.michelebrant.com
*.kindcustomdesign.com
*.matteiglass.com
lists.improvplayworks.com
*.kathytakeda.com
customers.tigertech.net
lists.iajgs.com
customers.tigertech.net
*.chuckwagonrental.com
lists.iajgs.com
*.thegardensnest.com
web06.tigertech.org
web06.tigertech.org
*.silveradostorage.com
*.thecookbooknookmysteries.com
*.prestonbeachwoodworks.com
lists.genealogycenter.net
*.amberontiveros.com
*.prestonbeachwoodworks.com
customers.tigertech.net
*.kathytakeda.com
lists.llamasannyc.com
customers.tigertech.net
customers.tigertech.net
lists.iajgs.com
web06.tigertech.org
lists.iajgs.com
web06.tigertech.org
*.lgcurrybuilder.com
*.thegardensnest.com
lists.th-audio.org

Certificate

The complete raw certificate details for lists.iajgs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJHfFjriTRH2Wzc15ArF
e+g7bSEDD/bmQBvIzG++QR3L7W19/+kSb71BMOgvVIDZpcgvwX7fIkGJdevfnILm
QZqdNnmG52g+y9JoOE3yYaUmQsgWWbRY8mzZHCjXDOorW6+uMV/40C7RiuuLH9Wq
1ZQRCn/wFcanFD+KSTjbjxcloawABd/nrOv24c5yLR0qH+gVAQDi6ZZHsA2SZfvd
DhSnX5jGvHlTvEUlcLGk8h6VQiSNuXZedq8v8bYCaThKuwvYLa9cpqrpH7R9GBjC
vTntyrCfTv8RGHS+NDN1HVq3WToRlQJEEj04XcUUNugdyOM2ccnOBYSXYW+4BngY
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362717781019377462645691145659480334360299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-10 06:27:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-08 06:27:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.iajgs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24309686438010488905831354453442404266253605059115381720402950745326854352159658512865834392177191885777416207294811536058795049109676781332315435634097961109356562899704370526527265356736053481939492444483102811947639291157896260325185487831294983932533418278144399215027838112086112023846002213023540143383776794534732583565033936039111056502528780706075083134574018234281603861653727506487849962192664100617491512471482156036049416311210607075041825770927749499893510841889236960892889506989695162235820860163360336977422292748717561569929982020753085796187755007616523875133904311988743579157444378501769835583739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b3f42a95d4a1b822d2a8a1d1fe45f747c198d1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2399 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.improvplayworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.indicant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.indoexpat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.indosoc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.innerphysician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.innertruthmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.innosci.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.integrativephysicaltherapyservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.integrityusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.internet-of-everything.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.interstell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ipte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.irisarri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.israelaction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.israelaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.italiansrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iucnosg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jacobkaye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jejuneinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jfmf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jgsgb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jgsgb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jillmanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jkswineandliquor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jmwauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jmwauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joefgoodman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joekowan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joelpalmermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joshuarich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.julieharrington.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jumpingrock.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.justcomm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.justusnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.juvenilejusticeinformationexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kalamazooacupuncturehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kalamazooacupunctureoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.katzenfinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kazoologist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.keithavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kempiweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kentest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kentnerburn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kigreene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kingstoncigarshoppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kitbradley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kokotele.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kokoteleguitarworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lacamas-shores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lacamasshores-community.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lacamasshores.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lachoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lafayettekiwanis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lagerrhythms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lahaciendagaleria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lajollabridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.laposadadelriosonora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.larchmontumc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.laurelspringsmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lcn-news.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ldssinglesinseattle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.legacyhomecaretn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.leonard-harris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lesleytsina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lexvanewcomers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lhoffman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lindamichelet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.linwoodspiritual.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.linwoodspiritualcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.linwoodspiritualctr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.llamasannyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lobsterbarnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.locallygrownnorthfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.luckypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lylefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.magnaenterprise.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.malvernsweatlodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.manet-routing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.margaretmcgaffeyfisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.markgillardrealestatemarketeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.marthamiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.master-acn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.master-comasic.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.master-rosalind-franklin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.masters-herbrand.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mattiedaughtry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.maubc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.maubc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.maxpartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.medinacoogs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.memorial-umc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.menschworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mgstudios.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.znrcds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b4048e0ef0000040300473045022100c00544c0bc11a615ec9053934972d5288899b1defbdcee5d3dc0a34b915ea0bf022033900d567cc96d1e1c42a37a29ad93391dae2a8ac6dca82329edb580f1696c2e00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b4048e0ce000004030046304402206a41ba4b92b420c142cad4a6f03a17c2fb9285ddfc992df354f1d4ebd3567424022012f12937cd4314640ef5aa1c6595d6248f9a69b99cb291cfb8808f64ec9dc225
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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