leckma.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d1:e3:05:8c:dd:0a:7e:8f:51:cd:d9:7c:19:dc:8b:40:d0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leckma.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:e3:05:8c:dd:0a:7e:8f:51:cd:d9:7c:19:dc:8b:40:d0
Serial Number (int): 332757636055334363659449487514382457585872
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:cb:55:85:61:0a:49:72:0f:d8:82:34:2b:e5:de:56:4a:20:dd:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 89:cf:10:01:9b:cc:cd:34:72:49:1d:6f:77:70:a6:a8:f8:3f:68:15
Fingerprint (sha256): 1d:9d:98:dc:02:bd:f7:cd:05:f5:5a:4c:a8:c0:da:58:d9:05:91:2c:b5:e6:77:8d:77:dc:16:68:5e:34:c3:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leckma.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leckma.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1-step-at-a-time.com
123ip.nl
absolutely.id
aladdinmovie.com
ask4tix.uk
audiofonica.com
avonavenue.com
bn.id
buonanota.com
casamadeira.com
chemhat.com
conclude.id
electro-service.com
emoky.com
georgesegal.com
gl.id
gvaco.com
harvestation.com
hat.id
howcanna.com
iamforyoureyesonly.com
just4bucs.com
leckma.com
legalsubway.com
madisonsportsmed.com
microfiberbriefs.com
moneyat.com
much.id
newjerseynursinghomeattorney.com
oahuslots.com
oak-doors.com
outclassify.com
paciflex.com
pf.id
policert.com
presidentcrenshaw.com
proshopskateboards.com
provision.id
radhakrishnamandir.org
resellershost.com
robcut.com
skinprotectant.org
sometimes.id
speechlessentertainment.com
sportsmedicineflorida.com
sportsmedicinerunning.com
takakuwa.com
tollins.com
www.1-step-at-a-time.com
www.123ip.nl
www.absolutely.id
www.aladdinmovie.com
www.ask4tix.uk
www.audiofonica.com
www.avonavenue.com
www.bn.id
www.buonanota.com
www.casamadeira.com
www.chemhat.com
www.conclude.id
www.electro-service.com
www.emoky.com
www.georgesegal.com
www.gl.id
www.gvaco.com
www.harvestation.com
www.hat.id
www.howcanna.com
www.iamforyoureyesonly.com
www.just4bucs.com
www.leckma.com
www.legalsubway.com
www.madisonsportsmed.com
www.microfiberbriefs.com
www.moneyat.com
www.much.id
www.newjerseynursinghomeattorney.com
www.oahuslots.com
www.oak-doors.com
www.outclassify.com
www.paciflex.com
www.pf.id
www.policert.com
www.presidentcrenshaw.com
www.proshopskateboards.com
www.provision.id
www.radhakrishnamandir.org
www.resellershost.com
www.robcut.com
www.skinprotectant.org
www.sometimes.id
www.speechlessentertainment.com
www.sportsmedicineflorida.com
www.sportsmedicinerunning.com
www.takakuwa.com
www.tollins.com
www.wy.id
www.zl.id
wy.id
zl.id

Other certificates including the domain name leckma.com

(limited to 100 certificates)
www.xn--8dbkn6b.com
leckma.com
www.dwain.boston
absolutely.id
radhakrishnamandir.org
gymgee.com
www.askfortickets.cm
www.involved.id
suicidetoserenity.blog
saddlebrookerealestate.com
www.bomb.id
hnva.com
www.dermatologistintampa.com
www.canadasgta.com
realstate.global
www.textbusters.com
forceghost.org
karrier.capital
sportsmedicinealabama.com
www.mmasomalia.com
tempesportsmed.com

Certificate

The complete raw certificate details for leckma.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynq3+4dX6ev2RZ5SbwLS
20a7uLmN02D3/xhqUtCvtA24jLYWkoIJ4gShkGNNBs835nye19S9PTpEz8gV3T8/
yvSGyzef5vF/qRbu/t/QnSo3MTnELjJzJPzaQU1iZMDugp+q+1KlW7cTT8RUCGtq
I7+KyQapEJyiKlKmRQhRWboYq8Y7t9e6Qa+dnTm7busmEZb3yY8Xdjyke+CWvyU/
NCDT4UxxzOWMfkKtk35uGGawlzKvAA7+GxafB7J6hetH0YCEkLo5Ql05Fy+PmG3K
HfaN71KugnRZxmitzestPOYONg8iGVigGTt+vmDlDz7mtn6ta6zp475guKqvJt4r
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332757636055334363659449487514382457585872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 02:09:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-17 02:09:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leckma.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25560652440545059291573699714735545652575458328147639191215314740902131081420136042634843012746212321909831955696739043872281937176682458356893478654955926761295528422533953604742903503644195538157291870887040330270905565029612282043911531337120586383830384693061916487645549459124220743885065062443432358337925552592943327326161665571701099050605413141775442063902777289395700053537996745819742744379532011931335007735458155273922938278300665710997329921712227020800405900400589514599180808017885172534518522536923532702972452371983782754749513796896753222784427633706976916228780259020073909946467507167838565444577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdcb5585610a49720fd882342be5de564a20dd36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1816 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-step-at-a-time.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123ip.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absolutely.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aladdinmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask4tix.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audiofonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bn.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buonanota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casamadeira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemhat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conclude.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electro-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emoky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgesegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gvaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvestation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hat.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howcanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamforyoureyesonly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just4bucs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leckma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalsubway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonsportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microfiberbriefs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneyat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'much.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newjerseynursinghomeattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oahuslots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oak-doors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outclassify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paciflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pf.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presidentcrenshaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proshopskateboards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provision.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radhakrishnamandir.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resellershost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robcut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinprotectant.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sometimes.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speechlessentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicineflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinerunning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takakuwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tollins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1-step-at-a-time.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123ip.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.absolutely.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aladdinmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ask4tix.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audiofonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avonavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bn.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buonanota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casamadeira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chemhat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conclude.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electro-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emoky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgesegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gvaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harvestation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hat.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howcanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iamforyoureyesonly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.just4bucs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leckma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalsubway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonsportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microfiberbriefs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moneyat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.much.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newjerseynursinghomeattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oahuslots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oak-doors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outclassify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paciflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pf.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.presidentcrenshaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proshopskateboards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provision.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radhakrishnamandir.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resellershost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robcut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skinprotectant.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sometimes.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speechlessentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicineflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinerunning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takakuwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tollins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wy.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wy.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zl.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fb6a096f0000004030048304602210089229d05fe7144580cce7c8ac6e61f675bfe7eceed45cb9e0cb71b9e32b479910221009a734a4595430b8c7df7e1312f80ae974bc03c828ad17e9b5c8f42c7d694100a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fb6a096dd000004030047304502203d3059130decf86192f968fb23224238eb7bb8200d46f66eb679e06c1f9748ae022100b505da99910b26e0433f15ad88cddfb3e21a84c417b0ab877287c2d0936f5a16
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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