ctjtf.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:94:bf:6a:97:ae:b0:c0:7c:34:a5:ae:3e:ba:86:86:28:a5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ctjtf.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:bf:6a:97:ae:b0:c0:7c:34:a5:ae:3e:ba:86:86:28:a5
Serial Number (int): 311953084106725808646819156403134772160677
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:fe:42:34:3e:a4:2e:ea:e9:e7:77:7a:20:43:e7:f4:54:1c:17:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:c9:73:8f:ef:36:1f:8a:ee:ec:80:19:0b:e1:48:b1:a2:11:ac:da
Fingerprint (sha256): 26:fa:51:f7:5c:86:5c:d8:73:e3:3c:3e:a2:69:b5:21:20:ee:8f:ae:d4:09:18:aa:2b:c9:14:44:a7:cc:5c:55

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ctjtf.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ctjtf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

angloamerica.com
animaltracks-kids.com
aspergerstest.com
bestmanagedcloudsolutionsproviders.site
biogistics.com
birthinjuriesandthelaw.com
bleiche.com
bomstein.com
bostontownhomes.com
bracewellpainting.com
celebratron.com
citystyleguide.com
ctjtf.com
deskembosser.com
diecastiot.com
epicdrone.com
fkfco.com
gandumovies.com
gayhotelhookups.com
grandforksoptometrist.com
heefer.com
intellibrick.com
italiawear.com
magichold.com
magicrefill.com
mercersigmanu.com
militarymedicalcase.com
mineral-sports.com
mountfaber.com
nvvvn.com
organiclingerie.com
pixel9studio.com
pointedflats.com
ruby9nine.com
rusticcraftsman.com
saigonapartment.com
sigmainsurance.com
smartexpressautoglass.com
stadiacomputing.com
stagglobal.com
stoportfolio.com
succat.com
thespikes.com
traffisicator.com
trumpvomarosa.com
twitterboycott.com
verticaljumphigher.com
viralvillian.com
www.angloamerica.com
www.animaltracks-kids.com
www.aspergerstest.com
www.bestmanagedcloudsolutionsproviders.site
www.biogistics.com
www.birthinjuriesandthelaw.com
www.bleiche.com
www.bomstein.com
www.bostontownhomes.com
www.bracewellpainting.com
www.celebratron.com
www.citystyleguide.com
www.ctjtf.com
www.deskembosser.com
www.diecastiot.com
www.epicdrone.com
www.fkfco.com
www.gandumovies.com
www.gayhotelhookups.com
www.grandforksoptometrist.com
www.heefer.com
www.intellibrick.com
www.italiawear.com
www.magichold.com
www.magicrefill.com
www.mercersigmanu.com
www.militarymedicalcase.com
www.mineral-sports.com
www.mountfaber.com
www.nvvvn.com
www.organiclingerie.com
www.pixel9studio.com
www.pointedflats.com
www.ruby9nine.com
www.rusticcraftsman.com
www.saigonapartment.com
www.sigmainsurance.com
www.smartexpressautoglass.com
www.stadiacomputing.com
www.stagglobal.com
www.stoportfolio.com
www.succat.com
www.thespikes.com
www.traffisicator.com
www.trumpvomarosa.com
www.twitterboycott.com
www.verticaljumphigher.com
www.viralvillian.com
www.xolco.com
www.youpickthehits.com
xolco.com
youpickthehits.com

Other certificates including the domain name ctjtf.com

(limited to 100 certificates)
animalassistancenetwork.com
ilivo.com
www.covershelf.com
ctjtf.com
wouleta.com
www.legacyace.com
www.vao70.com
www.greensoya.com
animalassistancenetwork.com
carmenopera.com
www.safepace.com
themotto.com
www.hue7.com
champaignproperty.com
www.gnv.bible
furniture-for-sale.com
www.timpas.com
waynerealtors.com
bluechipconsultoria.com
lightningfinancing.com
www.thetravelconsultant.com
animalassistancenetwork.com
www.canvaspillows.com
kingdomville.com
topicalsclub.com
www.goodpeopleunite.com
animalassistancenetwork.com
www.traprental.com
www.stemcelltoday.org

Certificate

The complete raw certificate details for ctjtf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINVTCCDD2gAwIBAgISA5S/apeusMB8NKWuPrqGhiilMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MDIxMDI0NThaFw0x
OTA5MzAxMDI0NThaMBQxEjAQBgNVBAMTCWN0anRmLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAO+g0eqFqWUaY36epBt19WkdgLwNmssmHCVM7vqU
j8kZ2+2KUttHGWw8NBAXMB5VVU3auL5vdid5NoMCWA3uD2aEl7T1PysaI2QB7fxJ
M/ZVGTMqXFZQQMQweJtc1jfxOy8wYSefNp3RsKidM6JunfEfdIPDa3rr4FcKkoi6
TDH0477SH9Jmep28mp0hKyGCx8mcB6dRYBohQZ/EzW1OHkpZ7IIX7WUJ7Ts+mE0R
xii+JBdN3KC5BekqwNhMqWPYwqNDIh0s+s1O9Bb5Gh/o1tq2lMEVLuYK4ej14pJY
MCISotvpNY/FyFOUcK/4Isu2AD4PgTG4+FWRg6z90Oc9N7cCAwEAAaOCCmkwggpl
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUKP5CND6kLurp53d6IEPn9FQcF3YwHwYD
VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G
CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G
CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCC
CB0GA1UdEQSCCBQwgggQghBhbmdsb2FtZXJpY2EuY29tghVhbmltYWx0cmFja3Mt
a2lkcy5jb22CEWFzcGVyZ2Vyc3Rlc3QuY29tgidiZXN0bWFuYWdlZGNsb3Vkc29s
dXRpb25zcHJvdmlkZXJzLnNpdGWCDmJpb2dpc3RpY3MuY29tghpiaXJ0aGluanVy
aWVzYW5kdGhlbGF3LmNvbYILYmxlaWNoZS5jb22CDGJvbXN0ZWluLmNvbYITYm9z
dG9udG93bmhvbWVzLmNvbYIVYnJhY2V3ZWxscGFpbnRpbmcuY29tgg9jZWxlYnJh
dHJvbi5jb22CEmNpdHlzdHlsZWd1aWRlLmNvbYIJY3RqdGYuY29tghBkZXNrZW1i
b3NzZXIuY29tgg5kaWVjYXN0aW90LmNvbYINZXBpY2Ryb25lLmNvbYIJZmtmY28u
Y29tgg9nYW5kdW1vdmllcy5jb22CE2dheWhvdGVsaG9va3Vwcy5jb22CGWdyYW5k
Zm9ya3NvcHRvbWV0cmlzdC5jb22CCmhlZWZlci5jb22CEGludGVsbGlicmljay5j
b22CDml0YWxpYXdlYXIuY29tgg1tYWdpY2hvbGQuY29tgg9tYWdpY3JlZmlsbC5j
b22CEW1lcmNlcnNpZ21hbnUuY29tghdtaWxpdGFyeW1lZGljYWxjYXNlLmNvbYIS
bWluZXJhbC1zcG9ydHMuY29tgg5tb3VudGZhYmVyLmNvbYIJbnZ2dm4uY29tghNv
cmdhbmljbGluZ2VyaWUuY29tghBwaXhlbDlzdHVkaW8uY29tghBwb2ludGVkZmxh
dHMuY29tgg1ydWJ5OW5pbmUuY29tghNydXN0aWNjcmFmdHNtYW4uY29tghNzYWln
b25hcGFydG1lbnQuY29tghJzaWdtYWluc3VyYW5jZS5jb22CGXNtYXJ0ZXhwcmVz
c2F1dG9nbGFzcy5jb22CE3N0YWRpYWNvbXB1dGluZy5jb22CDnN0YWdnbG9iYWwu
Y29tghBzdG9wb3J0Zm9saW8uY29tggpzdWNjYXQuY29tgg10aGVzcGlrZXMuY29t
ghF0cmFmZmlzaWNhdG9yLmNvbYIRdHJ1bXB2b21hcm9zYS5jb22CEnR3aXR0ZXJi
b3ljb3R0LmNvbYIWdmVydGljYWxqdW1waGlnaGVyLmNvbYIQdmlyYWx2aWxsaWFu
LmNvbYIUd3d3LmFuZ2xvYW1lcmljYS5jb22CGXd3dy5hbmltYWx0cmFja3Mta2lk
cy5jb22CFXd3dy5hc3BlcmdlcnN0ZXN0LmNvbYIrd3d3LmJlc3RtYW5hZ2VkY2xv
dWRzb2x1dGlvbnNwcm92aWRlcnMuc2l0ZYISd3d3LmJpb2dpc3RpY3MuY29tgh53
d3cuYmlydGhpbmp1cmllc2FuZHRoZWxhdy5jb22CD3d3dy5ibGVpY2hlLmNvbYIQ
d3d3LmJvbXN0ZWluLmNvbYIXd3d3LmJvc3RvbnRvd25ob21lcy5jb22CGXd3dy5i
cmFjZXdlbGxwYWludGluZy5jb22CE3d3dy5jZWxlYnJhdHJvbi5jb22CFnd3dy5j
aXR5c3R5bGVndWlkZS5jb22CDXd3dy5jdGp0Zi5jb22CFHd3dy5kZXNrZW1ib3Nz
ZXIuY29tghJ3d3cuZGllY2FzdGlvdC5jb22CEXd3dy5lcGljZHJvbmUuY29tgg13
d3cuZmtmY28uY29tghN3d3cuZ2FuZHVtb3ZpZXMuY29tghd3d3cuZ2F5aG90ZWxo
b29rdXBzLmNvbYIdd3d3LmdyYW5kZm9ya3NvcHRvbWV0cmlzdC5jb22CDnd3dy5o
ZWVmZXIuY29tghR3d3cuaW50ZWxsaWJyaWNrLmNvbYISd3d3Lml0YWxpYXdlYXIu
Y29tghF3d3cubWFnaWNob2xkLmNvbYITd3d3Lm1hZ2ljcmVmaWxsLmNvbYIVd3d3
Lm1lcmNlcnNpZ21hbnUuY29tght3d3cubWlsaXRhcnltZWRpY2FsY2FzZS5jb22C
Fnd3dy5taW5lcmFsLXNwb3J0cy5jb22CEnd3dy5tb3VudGZhYmVyLmNvbYINd3d3
Lm52dnZuLmNvbYIXd3d3Lm9yZ2FuaWNsaW5nZXJpZS5jb22CFHd3dy5waXhlbDlz
dHVkaW8uY29tghR3d3cucG9pbnRlZGZsYXRzLmNvbYIRd3d3LnJ1Ynk5bmluZS5j
b22CF3d3dy5ydXN0aWNjcmFmdHNtYW4uY29tghd3d3cuc2FpZ29uYXBhcnRtZW50
LmNvbYIWd3d3LnNpZ21haW5zdXJhbmNlLmNvbYIdd3d3LnNtYXJ0ZXhwcmVzc2F1
dG9nbGFzcy5jb22CF3d3dy5zdGFkaWFjb21wdXRpbmcuY29tghJ3d3cuc3RhZ2ds
b2JhbC5jb22CFHd3dy5zdG9wb3J0Zm9saW8uY29tgg53d3cuc3VjY2F0LmNvbYIR
d3d3LnRoZXNwaWtlcy5jb22CFXd3dy50cmFmZmlzaWNhdG9yLmNvbYIVd3d3LnRy
dW1wdm9tYXJvc2EuY29tghZ3d3cudHdpdHRlcmJveWNvdHQuY29tghp3d3cudmVy
dGljYWxqdW1waGlnaGVyLmNvbYIUd3d3LnZpcmFsdmlsbGlhbi5jb22CDXd3dy54
b2xjby5jb22CFnd3dy55b3VwaWNrdGhlaGl0cy5jb22CCXhvbGNvLmNvbYISeW91
cGlja3RoZWhpdHMuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjG
NzV55hB7zFYAAAFrsm5DBAAABAMARjBEAiBJNuK7B1D2kWupFeucSXxYNoIGVjTK
ZeYMjdyRSYQ2IAIgM3m1AWlsFCXXhXHAYopuiFA9qrscFo7tH6CwlOEXdB4AdwAp
PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWuybkMjAAAEAwBIMEYC
IQCJex5SzsohARJlPgE2OUGBwF56WhaTCduxsz10BVHJDwIhALCWMEoHx3/p8SWO
7LZKS6YtvND0M/u7xZcvroH4mKAlMA0GCSqGSIb3DQEBCwUAA4IBAQA7SUlNkJZq
lwSa0CeLALhzjE29lwbnSSbD0JkNFBV+aSf0VFc+EHC4ZQemkR0/uKPbPpYDRFqJ
hNdJ97t3bKhgChC8Hg/cODi/WCeivCiyUH4SXLD45ZfaZvQWFLBZcPLogT/IwpYo
0O6J7UuKBWdWwGBZVgUZhnjMefuTVpzJKyrPeNHz6uyXzKTv66R6WHj2h/qUgfBU
+XvpWMstf1BvPb/ZSEuZKxLwPot/o2r6MtS3eu/bCgWDiGCELzVY6GyqAcxe26z3
kzJW271cXdwcVX00tTs1k4lz4uu/U2BHHFnMDoWT97ADd4LxV0BzVpcO6c1cJqoc
Lav0H25TsFne
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76DR6oWpZRpjfp6kG3X1
aR2AvA2ayyYcJUzu+pSPyRnb7YpS20cZbDw0EBcwHlVVTdq4vm92J3k2gwJYDe4P
ZoSXtPU/KxojZAHt/Ekz9lUZMypcVlBAxDB4m1zWN/E7LzBhJ582ndGwqJ0zom6d
8R90g8NreuvgVwqSiLpMMfTjvtIf0mZ6nbyanSErIYLHyZwHp1FgGiFBn8TNbU4e
SlnsghftZQntOz6YTRHGKL4kF03coLkF6SrA2EypY9jCo0MiHSz6zU70FvkaH+jW
2raUwRUu5grh6PXiklgwIhKi2+k1j8XIU5Rwr/giy7YAPg+BMbj4VZGDrP3Q5z03
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311953084106725808646819156403134772160677
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 10:24:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 10:24:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ctjtf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30250258177053924137873228072286280128127608608010527389679779837729624820694217764433471714945874867555635901460534222137155004527868517492471474319547383471827009352327814991078034791979096987132750713422721435746336831394643506122336846184229616037792874384986822459379274477706987082746425096492596149400466590028015668228086516169107980012752383110884866718902753164677539175665091233832060396782623619052975698167119759367868533355246341146637667994427373738290396270312849011496073808368477103155038238104120013304625520955920708865643287172703935361922825849540573392703093373987770207261853558205674277386167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28fe42343ea42eeae9e7777a2043e7f4541c1776
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2068 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angloamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animaltracks-kids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspergerstest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestmanagedcloudsolutionsproviders.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthinjuriesandthelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bleiche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bomstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostontownhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracewellpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebratron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citystyleguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctjtf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deskembosser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diecastiot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicdrone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fkfco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gandumovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayhotelhookups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandforksoptometrist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heefer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intellibrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italiawear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magichold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicrefill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercersigmanu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militarymedicalcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineral-sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvvvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organiclingerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixel9studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointedflats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruby9nine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusticcraftsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saigonapartment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigmainsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartexpressautoglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadiacomputing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoportfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traffisicator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trumpvomarosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitterboycott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verticaljumphigher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viralvillian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angloamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.animaltracks-kids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspergerstest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestmanagedcloudsolutionsproviders.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birthinjuriesandthelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bleiche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bomstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bostontownhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bracewellpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celebratron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citystyleguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctjtf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deskembosser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diecastiot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicdrone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fkfco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gandumovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gayhotelhookups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandforksoptometrist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heefer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intellibrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italiawear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magichold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicrefill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercersigmanu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.militarymedicalcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mineral-sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvvvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organiclingerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pixel9studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointedflats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruby9nine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rusticcraftsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saigonapartment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sigmainsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartexpressautoglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadiacomputing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stoportfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.succat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thespikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traffisicator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trumpvomarosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twitterboycott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verticaljumphigher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viralvillian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xolco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youpickthehits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xolco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youpickthehits.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bb26e4304000004030046304402204936e2bb0750f6916ba915eb9c497c583682065634ca65e60c8ddc914984362002203379b501696c1425d78571c0628a6e88503daabb1c168eed1fa0b094e117741e007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bb26e43230000040300483046022100897b1e52ceca210112653e0136394181c05e7a5a169309dbb1b33d740551c90f022100b096304a07c77fe9f1258eecb64a4ba62dbcd0f433fbbbc5972fae81f898a025
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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