afacus.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b9:74:1f:41:7a:b7:bf:e4:27:56:ef:b1:18:fe:e7:53:cd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=afacus.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:74:1f:41:7a:b7:bf:e4:27:56:ef:b1:18:fe:e7:53:cd
Serial Number (int): 324443448412447348304662251765067921445837
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:44:81:3d:e0:32:08:39:7c:fa:6a:34:ca:30:06:c3:9e:5e:52:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:ca:5a:dc:5b:a5:ba:27:dc:6c:c6:f1:36:77:8c:d2:2f:98:db:76
Fingerprint (sha256): 23:bf:4f:3f:ce:60:f0:37:9c:b0:49:28:43:eb:9b:cb:07:60:aa:6a:09:e3:d4:c9:0e:f9:ec:c9:d3:77:51:23

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate afacus.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afacus.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1kartists.com
afacus.com
apparelsports.com
archery-bows.com
arsistant.com
authenticatedwallet.com
blockaders.com
brainsuperfood.com
busdmarket.com
christinekent.com
consumerbankruptcyattorneys.com
creekboat.com
cyboplus.com
elcaminodonuts.com
electrisys.com
essentialsuperfoods.com
expansionbolt.com
farnborough-aircraft.com
fizzit.com
fuctthat.com
galaxybus.com
gardenesprit.com
highbrowkit.com
iclaws.com
igamingus.com
joltkit.com
kidsfoodgrowingkit.com
lbrbasket.com
legacyboys.com
livecasinoct.com
lootboxbet.com
losbrandys.com
luxuryhotelresorts.com
lymediseasevirus.com
missionprotect.com
momentsnlight.com
neolus.com
nownextnews.com
off-beat.com
poolloungefloat.com
postofficeholidays.com
prettyskindiet.com
satisfiedtshirts.com
screencontact.com
solarpowerfat.com
tldrplus.com
tobaccys.com
veryshortlists.com
waterthreat.com
woolenhat.com
www.1kartists.com
www.afacus.com
www.apparelsports.com
www.archery-bows.com
www.arsistant.com
www.authenticatedwallet.com
www.blockaders.com
www.brainsuperfood.com
www.busdmarket.com
www.christinekent.com
www.consumerbankruptcyattorneys.com
www.creekboat.com
www.cyboplus.com
www.elcaminodonuts.com
www.electrisys.com
www.essentialsuperfoods.com
www.expansionbolt.com
www.farnborough-aircraft.com
www.fizzit.com
www.fuctthat.com
www.galaxybus.com
www.gardenesprit.com
www.highbrowkit.com
www.iclaws.com
www.igamingus.com
www.joltkit.com
www.kidsfoodgrowingkit.com
www.lbrbasket.com
www.legacyboys.com
www.livecasinoct.com
www.lootboxbet.com
www.losbrandys.com
www.luxuryhotelresorts.com
www.lymediseasevirus.com
www.missionprotect.com
www.momentsnlight.com
www.neolus.com
www.nownextnews.com
www.off-beat.com
www.poolloungefloat.com
www.postofficeholidays.com
www.prettyskindiet.com
www.satisfiedtshirts.com
www.screencontact.com
www.solarpowerfat.com
www.tldrplus.com
www.tobaccys.com
www.veryshortlists.com
www.waterthreat.com
www.woolenhat.com

Other certificates including the domain name afacus.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for afacus.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnus+Vh1IDt6zhG5eV4z
TUuNgxs9mSw47beKDptqR1e5w6PRQJ1tu2ShrOXPUGVuOUtltVuKChbsVnosuXQh
xY3Jme0ON2+5Z4yD367o1rRznKUdsDNgvh6bANKYIXz+Ezh4vmdD8ju34aSq7Y8E
f9EJnhT+LZoi8qCCbuGMlbSqN5VabQBTaTIS9PqRCsqyRLpDVTVid/Lo05SaRMGJ
Ue8hbsT6VPSIhxJZ7ykcxe1iKagvsO89s9GqvBqKgBc+ugNniksIGdSTzp2Xgks6
cw6XHv0s55lu2pU/Z6hwDzY8CCURM2YundwsXxrOxjrZVwETa3fN9aTz5dRz7rxQ
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324443448412447348304662251765067921445837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 17:25:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 17:25:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afacus.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22531405034631232527695981361968483797867432891912621974218279511402614061686297224666335746496247054216280351363515035288981296934074403258916375559265053511763170559135688838503125280968886453762908553576299316949640678759454981421481592030672602089535902181810590766551751997664817134225607383528761639915567946755243389095854651706654808094346196703634464944410511478439996552117500301544065947458752226828370317841747295038421080371703020706551195231100033208940058973042186689319238997451119319551702916295677664254396030054563413513511925482991952847673181165500721487057591079266556646664252420942018358563041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b44813de03208397cfa6a34ca3006c39e5e52a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1998 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1kartists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afacus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apparelsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archery-bows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsistant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authenticatedwallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainsuperfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busdmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christinekent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerbankruptcyattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creekboat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyboplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elcaminodonuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electrisys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essentialsuperfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expansionbolt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farnborough-aircraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fizzit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuctthat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galaxybus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardenesprit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highbrowkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iclaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igamingus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joltkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsfoodgrowingkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbrbasket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livecasinoct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lootboxbet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losbrandys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuryhotelresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lymediseasevirus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionprotect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momentsnlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neolus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nownextnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'off-beat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poolloungefloat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postofficeholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prettyskindiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satisfiedtshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screencontact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarpowerfat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tldrplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tobaccys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veryshortlists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterthreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolenhat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1kartists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afacus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apparelsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archery-bows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsistant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.authenticatedwallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brainsuperfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.busdmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christinekent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consumerbankruptcyattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creekboat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyboplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elcaminodonuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electrisys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essentialsuperfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expansionbolt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farnborough-aircraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fizzit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuctthat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galaxybus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardenesprit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highbrowkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iclaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igamingus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joltkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidsfoodgrowingkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbrbasket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacyboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livecasinoct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lootboxbet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.losbrandys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxuryhotelresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lymediseasevirus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionprotect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.momentsnlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neolus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nownextnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.off-beat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poolloungefloat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postofficeholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prettyskindiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satisfiedtshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.screencontact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarpowerfat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tldrplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tobaccys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veryshortlists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterthreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolenhat.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e5bb70ca80000040300473045022100c9b458f90b433e0bc2b77f9e66493562121e06670f1e8288df6a9317d5b053c6022078bf6bd9ded01c3ef401e799fa5ffd1e6ac662e88d926a0857d9bfb1f2ae6c9200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e5bb70cd50000040300473045022100ae08e78c08088195decfdc7c4ee71e3338f0bb8ea6381fb829854ec2456dfba402202117f1dbe9d6a5b88d363363df439766ea8b3a1daf3a5e535da6c6fca746e68c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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