*.smithobafineart.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d4:2e:51:72:cb:51:be:25:d9:4b:9f:ff:04:d7:46:ce:7d was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.smithobafineart.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:2e:51:72:cb:51:be:25:d9:4b:9f:ff:04:d7:46:ce:7d
Serial Number (int): 333538286974674651612421898654336623758973
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:62:8e:4a:ca:1c:2b:83:e6:30:7c:a8:47:8b:1f:99:2a:87:3e:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a0:7e:9a:02:00:46:65:2b:23:b5:63:30:d3:9c:ac:a4:13:0d:a2:f0
Fingerprint (sha256): 1c:ea:91:86:4f:54:6d:e6:d6:f7:7c:b7:61:9d:85:eb:4a:ea:c9:cd:82:40:d9:0c:84:aa:be:bc:ac:6d:3e:7b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.smithobafineart.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.smithobafineart.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aquarius-charter.com
*.artristic.com
*.bbkperformance.com
*.core7realestate.com
*.craftandlegend.com
*.eddieross.com
*.fabric2finish.com
*.fabrictofinish.com
*.faithdelivered.net
*.flyingcoffin.com
*.gracecafeky.org
*.gracemahomet.org
*.greenridgeconsulting.com
*.hailegerima.com
*.hvf-ut.org
*.integralbiosystems.com
*.jacobberggren.com
*.jeffrutherford.com
*.joyinsurance.com
*.kariestrin.com
*.martelloyachting.com
*.mercuriusbiofuels.com
*.meta-universe.org
*.npcomp.com
*.ocaproce.org
*.ontopofthehillcrafts.com
*.partnersdesign.net
*.randallchamberlain.com
*.rcimmlaw.com
*.reclaimedinteriorsboise.com
*.scorpiongulchstudio.com
*.scryrecordings.com
*.shopavocado.com
*.sleepinggc.com
*.smithobafineart.com
*.snapfileshare.com
*.sparkingjoyspreadingkindness.com
*.theroyalesf.com
*.tipnut1.com
*.topcounselingschools.org
*.wallstoowindows.com
*.wildmanalaska.com
*.zdtservices.com
aquarius-charter.com
artristic.com
bbkperformance.com
core7realestate.com
craftandlegend.com
eddieross.com
fabric2finish.com
fabrictofinish.com
faithdelivered.net
flyingcoffin.com
gracecafeky.org
gracemahomet.org
greenridgeconsulting.com
hailegerima.com
hvf-ut.org
integralbiosystems.com
jacobberggren.com
jeffrutherford.com
joyinsurance.com
kariestrin.com
martelloyachting.com
mercuriusbiofuels.com
meta-universe.org
npcomp.com
ocaproce.org
ontopofthehillcrafts.com
partnersdesign.net
randallchamberlain.com
rcimmlaw.com
reclaimedinteriorsboise.com
scorpiongulchstudio.com
scryrecordings.com
shopavocado.com
sleepinggc.com
smithobafineart.com
snapfileshare.com
sparkingjoyspreadingkindness.com
theroyalesf.com
tipnut1.com
topcounselingschools.org
wallstoowindows.com
wildmanalaska.com
zdtservices.com

Other certificates including the domain name smithobafineart.com

(limited to 100 certificates)
*.skycitymusic.co.uk
customers.tigertech.net
*.smithobafineart.com
*.performance-mktg.com
customers.tigertech.net
web14.tigertech.info
customers.tigertech.net
web14.tigertech.info
smithobafineart.com
customers.tigertech.net
customers.tigertech.net
*.sleepycatmountain.com
*.flawlesschaos.com
customers.tigertech.net
*.jackiesantiquemall.com
web14.tigertech.info
*.jackiesantiquemall.com
*.all-about-travel.net
*.5pointsgrowlers.com
web14.tigertech.net
*.sleepycatmountain.com
*.bradsmithgallery.com
*.capmedfinance.com
customers.tigertech.net
customers.tigertech.net
*.bradsmithgallery.com
*.jackiesantiquemall.com
*.burkmann.com
*.coalition4cats.net
customers.tigertech.net
web14.tigertech.info
*.burkmann.com
web14.tigertech.info
customers.tigertech.net
*.backyardprobiotics.com
*.ggashi.org
customers.tigertech.net
*.manatronics.com
*.coalition4cats.net
customers.tigertech.net

Certificate

The complete raw certificate details for *.smithobafineart.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTTwnvkt/rqmfhW/RDKi
TTvztGYwkO+vyXku22t1UGmsIIBjI3cVSHes29R9wf/KW8oCCwyq5rVIuhH3Xj1x
f/jXfzfzzJS4jTTRH/xLnLpsX06FIpVyH1B/pYdMaxrak2CKIpqwsGe1MdHYrjU4
HtjBCuq06ENtt8zmsAxCIrNaTDz9rith3eH5/a8h9yRAxWMiEP3anE+hSz+zvnrg
ij889L/k1spC9Mt9WDLjpRmRMaJMNaOL9pTOk8EB9Rhj65vXVu7hQYC2Q+WRsCmQ
aEUrQpT3NKACG3+PoUkT9cVWEtqdPtguQUy/FYbChTqBxbP5OSiKt+X5Wf9hCgxg
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333538286974674651612421898654336623758973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-26 10:13:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-26 10:13:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.smithobafineart.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23380192069074614503612620979768095217869035430559388218061962942491291867392265171370480635328177553658739465501069779155343807323024149221317027269971930709543715521421254564678050088095582979177158131018338062458840209367653275980195928417508658144539519798900390463591961967938376976296565089334693223511074353502238375438695055715037080980567436863806769660639924960607743196958841225263150057929301532290720656333764666165514224570039064925391498828650352196824619627575999429345122099814529002106232392746438611204812758442748380855251104257855164582127131554903442061387902792975123832508456261641095340646649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5628e4aca1c2b83e6307ca8478b1f992a873ef1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1780 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquarius-charter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artristic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbkperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core7realestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craftandlegend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eddieross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabric2finish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabrictofinish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faithdelivered.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyingcoffin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gracecafeky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gracemahomet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenridgeconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hailegerima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvf-ut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integralbiosystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacobberggren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeffrutherford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joyinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kariestrin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martelloyachting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercuriusbiofuels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meta-universe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.npcomp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocaproce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontopofthehillcrafts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partnersdesign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.randallchamberlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcimmlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reclaimedinteriorsboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scorpiongulchstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scryrecordings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopavocado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sleepinggc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smithobafineart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snapfileshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkingjoyspreadingkindness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theroyalesf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tipnut1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topcounselingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wallstoowindows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wildmanalaska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zdtservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquarius-charter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artristic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbkperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core7realestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftandlegend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddieross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabric2finish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabrictofinish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithdelivered.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingcoffin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gracecafeky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gracemahomet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenridgeconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hailegerima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvf-ut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integralbiosystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacobberggren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffrutherford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joyinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kariestrin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martelloyachting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercuriusbiofuels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meta-universe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcomp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocaproce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontopofthehillcrafts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnersdesign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randallchamberlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcimmlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reclaimedinteriorsboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorpiongulchstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scryrecordings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopavocado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepinggc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithobafineart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapfileshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkingjoyspreadingkindness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theroyalesf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipnut1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topcounselingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallstoowindows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildmanalaska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdtservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001769ec0f6bc00000403004630440220657dffaaff0353afbdd1e5ab7ffbc010115fb04f8ba5cbdfd3230649d96c1b67022066668ef50049fcee65938d6887f0d534b9fcaebfa1ac052e3af6102d350a2dab007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001769ec0f6bb0000040300483046022100a70f8d037ebab5046db7b450a93380ad48a4e690ed7b42c1271b3c32d9dd431d022100a63f0d1ccd6f37ab8bf3d31379ced273ed3ecdcb3e1256aab76b8a10431c41df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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