*.ruinasdebonampak.edu.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b2:02:7f:e3:fe:16:24:d0:24:1e:ee:9e:22:6f:35:1d:79 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ruinasdebonampak.edu.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b2:02:7f:e3:fe:16:24:d0:24:1e:ee:9e:22:6f:35:1d:79
Serial Number (int): 409022727540898423319847352939364276837753
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:98:90:fb:89:85:81:44:ed:c9:d2:72:45:7c:f3:05:ea:9e:c3:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:fe:34:16:bd:a9:6e:bd:d8:45:d7:e3:ec:08:dd:ca:06:a5:42:f1
Fingerprint (sha256): 1d:a0:64:95:1b:ca:40:05:de:95:cb:3e:00:cc:2f:1c:8e:da:a5:f1:f1:41:75:ba:dd:0e:f1:a7:94:c5:d1:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.ruinasdebonampak.edu.mx

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ruinasdebonampak.edu.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.928fitness.com
*.92beers.com
*.aerostocracy.com
*.ashbylumber.com
*.authorlevin.com
*.bojbook.com
*.cardinal-literary.com
*.cardinal-literary.net
*.cardinalcreativegroup.com
*.cicins.com
*.computorium.net
*.contourparquet.com
*.drywallrepair.biz
*.ebby.app
*.fairclothdrywall.com
*.goodjoseph.org
*.gracechurchpdx.org
*.hpaudiology.com
*.jenkinsnorthfield.com
*.jennaapplegarth.com
*.kathryn-barrett.com
*.leashedanimalphotography.com
*.lowdosenaltrexoneabout.com
*.margaretshepherd.com
*.mccluresart.com
*.newchogbooks.org
*.partnerintransition.ca
*.ruinasdebonampak.edu.mx
*.smallbizsimplifiedpodcast.com
*.srequineservices.com
*.tandscarpetcleaning.co.uk
*.tandscarpetcleaning.com
*.telluriccurrent.net
*.tscarpetcleaning.co.uk
*.vetwebsitedemo.com
*.wallysentme.com
*.whatdoesmygirlfriendwanttoeat.com
928fitness.com
92beers.com
aerostocracy.com
ashbylumber.com
authorlevin.com
bojbook.com
cardinal-literary.com
cardinal-literary.net
cardinalcreativegroup.com
cicins.com
computorium.net
contourparquet.com
drywallrepair.biz
ebby.app
fairclothdrywall.com
goodjoseph.org
gracechurchpdx.org
hpaudiology.com
jenkinsnorthfield.com
jennaapplegarth.com
kathryn-barrett.com
leashedanimalphotography.com
lowdosenaltrexoneabout.com
margaretshepherd.com
mccluresart.com
newchogbooks.org
partnerintransition.ca
ruinasdebonampak.edu.mx
smallbizsimplifiedpodcast.com
srequineservices.com
tandscarpetcleaning.co.uk
tandscarpetcleaning.com
telluriccurrent.net
tscarpetcleaning.co.uk
vetwebsitedemo.com
wallysentme.com
whatdoesmygirlfriendwanttoeat.com

Other certificates including the domain name ruinasdebonampak.edu.mx

(limited to 100 certificates)
*.supportmyschool.co.uk
customers.tigertech.net
*.ruinasdebonampak.edu.mx
lists.unityhawaii.org
*.supportmyschool.co.uk
lists.nikibikidress.com
customers.tigertech.net
web11.tigertechnologies.com
customers.tigertech.net
ruinasdebonampak.edu.mx
lists.skatekey.net
ruinasdebonampak.edu.mx
*.ruinasdebonampak.edu.mx
*.ruinasdebonampak.edu.mx
*.supportmyschool.co.uk
customers.tigertech.net
*.ruinasdebonampak.edu.mx
ruinasdebonampak.edu.mx
*.ruinasdebonampak.edu.mx
ruinasdebonampak.edu.mx
*.ruinasdebonampak.edu.mx
customers.tigertech.net
*.ruinasdebonampak.edu.mx
web11.tigertechnologies.com
lists.th-audio.net
ruinasdebonampak.edu.mx
customers.tigertech.net
*.supportmyschool.co.uk
lists.southbayclub.org
lists.waco-ak.org
*.supportmyschool.co.uk
ruinasdebonampak.edu.mx
*.supportmyschool.co.uk
web11.tigertechnologies.com
lists.dabblewood.com
*.supportmyschool.co.uk
*.supportmyschool.co.uk
*.ruinasdebonampak.edu.mx
customers.tigertech.net
*.ruinasdebonampak.edu.mx
customers.tigertech.net
ruinasdebonampak.edu.mx
customers.tigertech.net
lists.familyfitnessandfreedom.com
ruinasdebonampak.edu.mx
*.ruinasdebonampak.edu.mx
lists.celiet.com
*.ruinasdebonampak.edu.mx
lists.dottywood.org
web11.tigertechnologies.com
ruinasdebonampak.edu.mx
*.ruinasdebonampak.edu.mx
lists.dottywood.org
lists.prairievillage.org
ruinasdebonampak.edu.mx
customers.tigertech.net
web11.tigertech.net
*.supportmyschool.co.uk
customers.tigertech.net
*.supportmyschool.co.uk
lists.grandsquares.com
lists.dottywood.org
*.ruinasdebonampak.edu.mx
lists.dabblewood.com
lists.dabblewood.com
web11.tigertechnologies.com
lists.brookfieldfarm.com

Certificate

The complete raw certificate details for *.ruinasdebonampak.edu.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVCbMg44XXDZBbjYs43l
ZOc2i8k6RXZxtd9NBUURVWwvEVkOm6rCVVW5VP3LYZ1VRuSgKLn7+ihGlRG3oUGI
e57oASbOnXSVchkQHuDyskuAelVgMDe1BeBXa7CWPkfockglyIk1mAq5uj4CEV82
XqNLJ5H25M2nJAMlmnSLsRWP4exaaTCsMnx15XXJyFe1EXids5a/3AXJB574MeXc
effFh0hB2LYhJKoNskORVqhyguDdHWHDDj/jONi6zJ6EkkHUS/8LOzsbCh9GtEu+
voIOO2pvQ3AdssqqHpBNCYqWL+bNY++e+2ywzW0bHby3dKfz3D+/+DhBcModDk+o
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409022727540898423319847352939364276837753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 08:16:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-20 08:16:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ruinasdebonampak.edu.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23898788053292798754256238358322725908472676863497141772531178051273468515256074757777413002785122028606792513688837370473450877156306577536917910441231456751513090585598705941342062466130801558155785241369603993388066416137599080198882047600520307408821496874076952355792489015258910329631767444441669889471999535148250813621784619068106488269517774770708888630235821423807330306502653535677644409816496175133926517669145651762798837005608000300881689155049496198595678543145774442883377445168467991986621230818807766231217930948372288633482736748974365373892739340944261628273273651776933430469262756849451428456609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e29890fb89858144edc9d272457cf305ea9ec3b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1620 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.928fitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.92beers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerostocracy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashbylumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.authorlevin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bojbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardinal-literary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardinal-literary.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardinalcreativegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cicins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.computorium.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contourparquet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drywallrepair.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebby.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairclothdrywall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodjoseph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gracechurchpdx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpaudiology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jenkinsnorthfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jennaapplegarth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathryn-barrett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leashedanimalphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowdosenaltrexoneabout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.margaretshepherd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mccluresart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newchogbooks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partnerintransition.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruinasdebonampak.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smallbizsimplifiedpodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srequineservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tandscarpetcleaning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tandscarpetcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telluriccurrent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tscarpetcleaning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetwebsitedemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wallysentme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whatdoesmygirlfriendwanttoeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '928fitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '92beers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerostocracy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashbylumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorlevin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bojbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinal-literary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinal-literary.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalcreativegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cicins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computorium.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contourparquet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drywallrepair.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebby.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairclothdrywall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodjoseph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gracechurchpdx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpaudiology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkinsnorthfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jennaapplegarth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathryn-barrett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leashedanimalphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowdosenaltrexoneabout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margaretshepherd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccluresart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newchogbooks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerintransition.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruinasdebonampak.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallbizsimplifiedpodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srequineservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tandscarpetcleaning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tandscarpetcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telluriccurrent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tscarpetcleaning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetwebsitedemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallysentme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatdoesmygirlfriendwanttoeat.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001686a8c1a0c000004030046304402200591ec0e93b66fea59e17b6e17fc6d372df96ccde6c731c85d6f15065f0fe7c202204992aa0de5a0ed8a7bfd6ec032f56a62beaf299e2c9b9a082c9eae08716c7262007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001686a8c1a03000004030047304502205320003a4a8ce484807b723461e0179e11f827da30a518c35ff0c3d1c5440a2a022100f5fc5bd51db93187a7f5fb484771d827a2867d65fa54a0f75b75814f288a27d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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