www.aberfx.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c6:68:dc:39:5d:d1:8a:92:74:af:11:3e:6d:77:cb:42:b5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.aberfx.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:68:dc:39:5d:d1:8a:92:74:af:11:3e:6d:77:cb:42:b5
Serial Number (int): 328852149626027481030885652666121808724661
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:e5:4c:90:b0:80:e1:c2:8b:6b:e1:ad:d5:ba:ec:ac:bc:49:70:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:0c:0b:91:7e:f2:d2:da:29:48:5e:1d:e4:96:61:14:c6:e3:49:5c
Fingerprint (sha256): 1c:40:de:95:ee:a9:88:84:61:84:68:ff:4e:85:a9:4a:e8:bd:e5:ca:02:22:d9:b8:40:c5:a7:80:ce:8c:82:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.aberfx.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aberfx.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dprintedpresent.com
3dprintedpresents.com
3dprintedx.com
3dsculptors.com
aberfx.com
assessorament.com
baglestix.com
benzinailowcost.com
benzinaiolowcost.com
benzinalowcost.com
bestlasvegasresorts.com
biometricdeadbolt.com
blucky.com
bondibeachsydney.com
celestialbay.com
chaddeley.com
chequetx.com
chicagobirthlaw.com
cogniplay.com
cpmatrix.com
donaidepay.com
duiarkansasattorney.com
duiphillyattorney.com
ethicalinvestmentmanagement.com
feelatx.com
fraudfly.com
goremeturkey.com
gta-siliconvalley.com
hawaiimonthly.com
healthywerx.com
hemsky.com
homegoods-tv.com
homewardly.com
identivox.com
irestoredaily.com
kathleencrowley.com
keepthedoctoraway.com
kennyroby.com
lbphotography.com
liamtormey.com
movxact.com
onlinecollegesforpsychology.com
pangeastudy.com
preceptsbiblestudy.com
repairsdoneright.com
skatingskirts.com
specway.com
teenfordaddy.com
temeculaphotography.com
whatticksalivadoestohumanbody.com
www.3dprintedpresent.com
www.3dprintedpresents.com
www.3dprintedx.com
www.3dsculptors.com
www.aberfx.com
www.assessorament.com
www.baglestix.com
www.benzinailowcost.com
www.benzinaiolowcost.com
www.benzinalowcost.com
www.bestlasvegasresorts.com
www.biometricdeadbolt.com
www.blucky.com
www.bondibeachsydney.com
www.celestialbay.com
www.chaddeley.com
www.chequetx.com
www.chicagobirthlaw.com
www.cogniplay.com
www.cpmatrix.com
www.donaidepay.com
www.duiarkansasattorney.com
www.duiphillyattorney.com
www.ethicalinvestmentmanagement.com
www.feelatx.com
www.fraudfly.com
www.goremeturkey.com
www.gta-siliconvalley.com
www.hawaiimonthly.com
www.healthywerx.com
www.hemsky.com
www.homegoods-tv.com
www.homewardly.com
www.identivox.com
www.irestoredaily.com
www.kathleencrowley.com
www.keepthedoctoraway.com
www.kennyroby.com
www.lbphotography.com
www.liamtormey.com
www.movxact.com
www.onlinecollegesforpsychology.com
www.pangeastudy.com
www.preceptsbiblestudy.com
www.repairsdoneright.com
www.skatingskirts.com
www.specway.com
www.teenfordaddy.com
www.temeculaphotography.com
www.whatticksalivadoestohumanbody.com

Other certificates including the domain name aberfx.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.aberfx.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofPG6G8gl0zu7eiOIWvG
fCGDi/G8mwixndQ0QofXvtj/2QPiZcsAJ7sC7oGFAcrhLbUR+ZQ4WA7P/freQza6
R4NEzUfLEbhdBHLj6myvWHuqxRlkgAjMihtEhZM0QhnwgNm9THoMr+MS92xd7Lle
JtgZLvIMbOgb5DEsrG0x/tIxf8XYDmZ1VzJgKTzBhNrxdqfA3T3bK9kwTlNez/Sb
FWaZcOLlKmSziOXjaT4UFjdlhWKYk9z91Z6HVqti+ThWc/ZypbWO5AJFrzHm9EF8
WooktMbYkEMoTsc+TjwaM/vahFZXD6WbCVU5FGpQbVcDv7IQ1dsRgMpdiAHANQCw
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328852149626027481030885652666121808724661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 08:30:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 08:30:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aberfx.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20444578010748115254667964035395750907925546239004027360685735628003311427842714436127574514598757660599618172136486406590915331808963583209344623929571968080008451737462904751661455628676953095531460741372717093466380726101663502849787834153809407148824407486552890786229903257147890286754152777771505184441098974102914394449497084011333461105802224579072819431149350696088985648843153337544436308129375757855834218973956014328108638034862558931149036222031617627903298861313929666324209985556188620546836786996915865142602380209913891492604927561261132188749428613615287499621975759210076006315072805979247842734083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0be54c90b080e1c28b6be1add5baecacbc49709e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dprintedpresent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dprintedpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dprintedx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dsculptors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assessorament.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baglestix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benzinailowcost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benzinaiolowcost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benzinalowcost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestlasvegasresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biometricdeadbolt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blucky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bondibeachsydney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celestialbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaddeley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chequetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagobirthlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogniplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpmatrix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donaidepay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duiarkansasattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duiphillyattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethicalinvestmentmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feelatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraudfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goremeturkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gta-siliconvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiimonthly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthywerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homegoods-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homewardly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identivox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irestoredaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathleencrowley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keepthedoctoraway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennyroby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liamtormey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movxact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinecollegesforpsychology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pangeastudy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preceptsbiblestudy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repairsdoneright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skatingskirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenfordaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temeculaphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatticksalivadoestohumanbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dprintedpresent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dprintedpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dprintedx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dsculptors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aberfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assessorament.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baglestix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benzinailowcost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benzinaiolowcost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benzinalowcost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestlasvegasresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biometricdeadbolt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blucky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bondibeachsydney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celestialbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaddeley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chequetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagobirthlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogniplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpmatrix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donaidepay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duiarkansasattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duiphillyattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethicalinvestmentmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feelatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fraudfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goremeturkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gta-siliconvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiimonthly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthywerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homegoods-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homewardly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.identivox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irestoredaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kathleencrowley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepthedoctoraway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kennyroby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liamtormey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movxact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinecollegesforpsychology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pangeastudy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preceptsbiblestudy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repairsdoneright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skatingskirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.specway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teenfordaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temeculaphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatticksalivadoestohumanbody.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170ce14da30000004030047304502202a6dacc617be1790fb1fd91f864411dba8b79f8842ab46764bf61950ba709581022100cad5ed1b5d41a6205fd11be070cc70b08ac7ed0cc3ef8beacd8e60657d9c065800770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170ce14da7c0000040300483046022100eb4211ec6d4ac1b0dd0975ff75185d35763573879443b5de3c8179fed4b61bf40221009afc3b1d7f2f51114e9d63c73c05fd3337d63440ec6036a5ec553bdbfde66b5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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