aj1.goprimer.co

Issued by R3

About this certificate

This digital certificate with serial number 04:3f:b8:14:80:64:0f:84:af:f5:a8:fd:56:94:5d:de:6f:05 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aj1.goprimer.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3f:b8:14:80:64:0f:84:af:f5:a8:fd:56:94:5d:de:6f:05
Serial Number (int): 370131617244297753204996590503444168470277
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 41:20:42:5e:4f:c5:39:bd:5e:37:fe:cd:27:a9:d9:1a:ce:5b:cc:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 99:25:de:8f:8b:29:e7:bd:4c:d2:8c:6a:50:35:3b:14:7f:5b:5e:c1
Fingerprint (sha256): 1f:55:d0:3b:d2:e7:74:b1:43:67:9e:23:74:0e:f4:82:b7:db:83:74:74:f5:eb:e6:90:78:04:8b:c5:23:9b:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aj1.goprimer.co

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aj1.goprimer.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aj1.goprimer.co
aj1.goprimer.com
apostrophe.goprimer.com
atolla.goprimer.com
billcom.goprimer.com
buy.letsbld.com
buy.nomnomnow.com
cameo.goprimer.com
cuemath.goprimer.com
curalife.goprimer.com
cushion.goprimer.com
cutbackcoach.goprimer.com
dario.goprimer.com
diversyfund.goprimer.com
evernow.goprimer.com
evernow2.goprimer.com
explore.wineaccess.com
felixforyou.goprimer.com
fiton.goprimer.com
forhims.goprimer.com
gainful.goprimer.com
get.fitonapp.com
get.forhims.com
get.metabolicrenewal.com
get.monarchmoney.com
get.montikids.com
get.noom.com
get.tulipcremation.com
go.gainful.com
hawthorne.goprimer.com
invest.diversyfund.com
katkin.goprimer.com
langehair.goprimer.com
lastbrand.goprimer.com
lifeprofitness.goprimer.com
liveclass.cuemath.com
metabolicrenewal.goprimer.com
modernfertility.goprimer.com
monarchmoney.goprimer.com
montikids.goprimer.com
mysteryscience.goprimer.com
nomnomnow.goprimer.com
offer.mydario.com
otter.goprimer.com
papaandbarkley.goprimer.com
peachystudio.goprimer.com
picsart.goprimer.com
prowritingaid.goprimer.com
radfordbeauty.goprimer.com
rb.victoriaradford.com
rocksbox.goprimer.com
sans.goprimer.com
secure.goprimer.com
shop.lastbrand.com
signup.bill.com
start.bungalow.com
start.farmsteadapp.com
start.getsunday.com
subscribe.rocksbox.com
sunday.goprimer.com
supercoffee.goprimer.com
thefeed.goprimer.com
therapynotebooks.goprimer.com
triplebyte.goprimer.com
trufora.goprimer.com
try-app.go.insure
try.apostrophe.com
try.atolla.co
try.breathesans.com
try.cameo.com
try.curalife.com
try.cushion.ai
try.cutbackcoach.com
try.drinksupercoffee.com
try.evernow.co
try.evernow.com
try.felixforyou.ca
try.forhers.com
try.hawthorne.co
try.katkin.club
try.langehair.com
try.lifeprofitness.com
try.madison-reed.com
try.modernfertility.com
try.mysteryscience.com
try.otter.ai
try.pbtopicals.com
try.peachystudio.com
try.picsart.com
try.prowritingaid.com
try.thefeed.com
try.therapynotebooks.com
try.triplebyte.com
try.trufora.com
try.upstep.com
try.wildfang.com
upstep.goprimer.com
wildfang.goprimer.com
wineaccess.goprimer.com

Other certificates including the domain name goprimer.co

(limited to 100 certificates)
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
aj1.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
aj1.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
aj.goprimer.co
5000772504.goprimer.co
aj.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
aj.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
5000772504.goprimer.co
academia.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
academia.goprimer.com
aj.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
aj.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
academia.goprimer.com
academia.goprimer.com
aj.goprimer.co
agirlnamedotis.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com

Certificate

The complete raw certificate details for aj1.goprimer.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mid+SivKSolqfoXkhYL
PsoP6I09KXURqQmksYYBieGLJxk7Bexuj8QuwLAnqq2zkXhBJXFhSYekl0pxVYfy
AsZaZ2SR9XAgikCQwz0ww2gy1sL05khAXE5EDDQ+WwvORCLIBo975fwirAlN/L+Z
jk8rTGAfQpMLX2rH9ccRJZfbGZ2nl8Q/IJk9JVjXMzSPgZBA2enjEhbvPUt8Guj/
0JfmiZyV52ChJePrjGRHMsb1THb61qnQPjdawJp2WxtufSuj/p72wEONyH+E5Tmz
YBiAkrNLNZEw144FVwO9PO5fHT+C2bPrc/HZV6Lpms6cpXvPTF6YvjW5eUgjola9
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370131617244297753204996590503444168470277
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-04 20:23:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-02 20:23:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aj1.goprimer.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26561632649289242673104234959872801128420179732529925964811639495981752803751110457637179932552642074648841538174164539410491304687592577411373996706057992759053520891615348236685483637696826389333186955766252464864683779863453979305613249864722360078284431418199690834354276729953972585260491902592047154929213881274754491300746256962921539916648906814225889606573382027627596706726002943189955574750748770264600835681292239260009236079591146623296034203527190679556993750218942875661701445802638508409924813269679413012712208874420145381023467021067257474713201165807484105284882652146113389249769965710802458950917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4120425e4fc539bd5e37fecd27a9d91ace5bccba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aj1.goprimer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aj1.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apostrophe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atolla.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billcom.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.letsbld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.nomnomnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameo.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuemath.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curalife.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cushion.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutbackcoach.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dario.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversyfund.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow2.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.wineaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felixforyou.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiton.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forhims.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainful.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.fitonapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.forhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.metabolicrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.monarchmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.montikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.noom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.tulipcremation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gainful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawthorne.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.diversyfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katkin.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langehair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastbrand.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeprofitness.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveclass.cuemath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolicrenewal.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernfertility.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monarchmoney.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montikids.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysteryscience.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomnomnow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offer.mydario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otter.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papaandbarkley.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachystudio.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picsart.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prowritingaid.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radfordbeauty.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rb.victoriaradford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocksbox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sans.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lastbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.bill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.bungalow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.farmsteadapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.getsunday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.rocksbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunday.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercoffee.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefeed.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapynotebooks.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triplebyte.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trufora.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try-app.go.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.apostrophe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.atolla.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.breathesans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cameo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.curalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cushion.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cutbackcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.drinksupercoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.felixforyou.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.forhers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.hawthorne.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.katkin.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.langehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.lifeprofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.madison-reed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.modernfertility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.mysteryscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.otter.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.pbtopicals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.peachystudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.prowritingaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.thefeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.therapynotebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.triplebyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.trufora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.upstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.wildfang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstep.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildfang.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineaccess.goprimer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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