www.bigwatertoys.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8c:91:b8:21:6b:12:f5:35:3a:b1:04:d6:96:a8:68:24:af was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bigwatertoys.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:91:b8:21:6b:12:f5:35:3a:b1:04:d6:96:a8:68:24:af
Serial Number (int): 309170083284025705512500933395617635902639
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:1f:0c:0f:a0:1c:ba:cb:7e:75:22:b0:01:a2:44:5d:c8:e6:78:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:66:fe:84:64:6d:c6:df:01:6e:f1:ad:66:d7:6e:70:38:7f:dd:7a
Fingerprint (sha256): 22:cc:d2:6e:f4:e9:52:7d:29:4b:c9:4e:70:61:8b:06:f7:38:f3:f0:54:f7:29:71:e5:b5:a0:5c:5c:5f:de:29

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bigwatertoys.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bigwatertoys.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4dprintworks.com
arssistant.com
bigwatertoys.com
biobars.com
boca-tv.com
canyoustart.com
cmvco.com
commercialconnections.com
docksidewatersports.com
domainnameguru.com
duct-cleaners.com
dynapaint.com
elasticmoney.com
enlightu.com
exotiquecouture.online
feinteem.org
fhpco.com
flakscasino.com
flatboots.com
flexweight.com
freshfoodgenius.com
fresnoweddingphotography.com
gayalphaguys.com
gummaster.com
individualrightsattorney.com
life-counselor.com
livinglifemindfully.com
londonpropertyconsultant.com
luxxetv.com
marijuanadetoxsecrets.com
mastersdegree.site
milpitaslocksmiths.com
neosor.com
notestomydaughters.com
pacifictechadvisors.com
papayaproducts.com
phenomenallifeuniversity.org
poisonivypreventionweek.org
polyheat.com
provedia.com
saranac-lake.com
servicepointnetwork.com
shellpad.ch
smiley247.com
solutionmagnets.com
spiritualacupuncture.com
stemsys.com
tumpat.com
urban-market.com
voxxer.com
www.4dprintworks.com
www.arssistant.com
www.bigwatertoys.com
www.biobars.com
www.boca-tv.com
www.canyoustart.com
www.cmvco.com
www.commercialconnections.com
www.docksidewatersports.com
www.domainnameguru.com
www.duct-cleaners.com
www.dynapaint.com
www.elasticmoney.com
www.enlightu.com
www.exotiquecouture.online
www.feinteem.org
www.fhpco.com
www.flakscasino.com
www.flatboots.com
www.flexweight.com
www.freshfoodgenius.com
www.fresnoweddingphotography.com
www.gayalphaguys.com
www.gummaster.com
www.individualrightsattorney.com
www.life-counselor.com
www.livinglifemindfully.com
www.londonpropertyconsultant.com
www.luxxetv.com
www.marijuanadetoxsecrets.com
www.mastersdegree.site
www.milpitaslocksmiths.com
www.neosor.com
www.notestomydaughters.com
www.pacifictechadvisors.com
www.papayaproducts.com
www.phenomenallifeuniversity.org
www.poisonivypreventionweek.org
www.polyheat.com
www.provedia.com
www.saranac-lake.com
www.servicepointnetwork.com
www.shellpad.ch
www.smiley247.com
www.solutionmagnets.com
www.spiritualacupuncture.com
www.stemsys.com
www.tumpat.com
www.urban-market.com
www.voxxer.com

Other certificates including the domain name bigwatertoys.com

(limited to 100 certificates)
www.bigwatertoys.com
opensourcecommunitysummit.com
starsignplanner.com
bigwatertoys.com
bigwatertoys.com

Certificate

The complete raw certificate details for www.bigwatertoys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJpq43nX8LqTLp76VyKu
geRKkwkXl8/vIZOKLTfYDU9UtLg0pyNoelb8ahHLns7OVNagVF1Jyk6uD6cziYZ9
wsmYpOVLv11lAZQZkbMGDj6I8sUc/90VPecO26S0T+n/QkJ8YUc99GMudnzlEb9s
WQAhLj/yz+AKEuWKvLiOHnFtPwY2DUHaAc1J/z3gHOlaN+QCGJ2yr0tCxDa40OKg
OzQAhrzWM2wjozZZmmnX+QZK+BGidtqprS4jjE5R9bgNXfV1v5+DwepH0VzUlyTa
AgNR1rKB7zgGMEqpAgwEyNbQ7dyUKiVBMsqyZR374kJ2EO6jU1RVOAl81I5ap2+y
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309170083284025705512500933395617635902639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 22:22:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 22:22:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bigwatertoys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23303994237532261197077776552642628095020555618262749111714186392985706984737652348047071278074515202271457133496148079267693820312470954268020097610876251752848631496971207515319935763223894337609310141506018559047730801443472626172878473058011072592482935112663670188204382803173136493820629573430223095037226418478285166863303846718982241365528295971050956395170809389834464484056426797124361818360178360364857975534154023104035000224154351673698701205672097272716054544180875460956963803109450360592426775847332708577702267173270755583293799919404747209593565574312729611581204956866921353241205546643546883207819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f81f0c0fa01cbacb7e7522b001a2445dc8e67896
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dprintworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arssistant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigwatertoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biobars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boca-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canyoustart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialconnections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docksidewatersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainnameguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duct-cleaners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynapaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enlightu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exotiquecouture.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feinteem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhpco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flakscasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatboots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexweight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshfoodgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fresnoweddingphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayalphaguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gummaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individualrightsattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-counselor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livinglifemindfully.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonpropertyconsultant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxxetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marijuanadetoxsecrets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mastersdegree.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milpitaslocksmiths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neosor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notestomydaughters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacifictechadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papayaproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phenomenallifeuniversity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivypreventionweek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saranac-lake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicepointnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shellpad.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smiley247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutionmagnets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritualacupuncture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tumpat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urban-market.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voxxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4dprintworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arssistant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigwatertoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biobars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boca-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canyoustart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmvco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercialconnections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docksidewatersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domainnameguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duct-cleaners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynapaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elasticmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enlightu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exotiquecouture.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feinteem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fhpco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flakscasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatboots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexweight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freshfoodgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fresnoweddingphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gayalphaguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gummaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.individualrightsattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.life-counselor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livinglifemindfully.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonpropertyconsultant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxxetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marijuanadetoxsecrets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mastersdegree.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milpitaslocksmiths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neosor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notestomydaughters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacifictechadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papayaproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phenomenallifeuniversity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivypreventionweek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polyheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saranac-lake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicepointnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shellpad.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smiley247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solutionmagnets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritualacupuncture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tumpat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urban-market.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voxxer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016be87f1bb4000004030047304502200fc65acdecb97576fd012880defc366c25c215b2a78f3564e7bd7d9e613c0c74022100ce566c992c9de281a6735a4ead47e1387217c1f72faedca8c4932dcd63d132d7007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016be87f1ba6000004030046304402203aa605a6db06f3ea58cbbd2822c803e7d4308babc0a3f277cea6fa9a6ab2a76c02207e53b2ba78e55bdaeb319c70e0ee3b4574b21785b1c02f05c8be9f8410959d59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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