lists.brookfieldfarm.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d2:3c:fb:5b:d6:c2:0e:70:1c:33:10:c1:43:23:03:17:da was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lists.brookfieldfarm.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d2:3c:fb:5b:d6:c2:0e:70:1c:33:10:c1:43:23:03:17:da
Serial Number (int): 419989499589410809364559882090210541115354
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:3f:42:a9:5d:4a:1b:82:2d:2a:8a:1d:1f:e4:5f:74:7c:19:8d:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:15:37:ac:cd:fe:0c:4b:bf:a0:30:52:5f:9e:87:b8:33:4e:71:2f
Fingerprint (sha256): 29:1b:70:35:76:1c:8f:55:e9:55:9c:90:38:6c:14:95:8c:86:03:45:0a:e2:c5:ec:97:79:10:c4:d6:ca:f4:84

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lists.brookfieldfarm.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.brookfieldfarm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.brookfieldfarm.com
lists.brownspath.com
lists.bruinslca.com
lists.bwajakarta.org
lists.byronbible.org
lists.cactroy.org
lists.cafebacchus.net
lists.callicomp.com
lists.callicomp.info
lists.callihans.com
lists.callihans.net
lists.callihans.org
lists.cambridgewomenscommission.org
lists.campaignforequaljustice.org
lists.candiceheld.com
lists.capitalregionbluesnetwork.org
lists.carolynmcc.com
lists.carsplusdms.com
lists.carsplussoftware.com
lists.caryjohnfranklin.com
lists.catscradle.us
lists.cbcdc.org
lists.cedarbrookcamps.org
lists.cedarbrooktexas.com
lists.cej-oregon.org
lists.celebratelit.com
lists.celiet.com
lists.cementedtensions.com
lists.centerforsustainableliving.org
lists.cfms.org
lists.chainsrequired.com
lists.championstoragetexas.com
lists.charlespanderson.com
lists.charlottechurch.org
lists.cheeseshopmystery.com
lists.chicksingernight.com
lists.childrenshomeofkingston.org
lists.chimneysweepenergycorp.com
lists.chkingston.org
lists.chriskanther.com
lists.chuantaokungfu.com
lists.citypsych.net
lists.civicorchestrampls.org
lists.cliffrichardsongs.com
lists.climateequityreference.org
lists.clj-usa.org
lists.clroth.com
lists.cobha.org
lists.codependents.org
lists.coffeesystemhv.com
lists.coffeesystemshv.com
lists.cohousing.org
lists.cohousingresearchnetwork.org
lists.colemancatholic.com
lists.colemancatholic.net
lists.colemancatholic.org
lists.collectiveresilience.com
lists.comprotoner.com
lists.connectingimmigrants.org
lists.connecttosuccesspdx.com
lists.conversation.ca
lists.copakecountryclub.com
lists.cowgirlspirit.org
lists.crbn.org
lists.cscohomail.org
lists.csrhoa.org
lists.cuttingsys.com
lists.dabblewood.com
lists.dalecomputer.com
lists.danbrownandassociates.com
lists.danlavorel.com
lists.dannybritt.com
lists.deafbiographies.com
lists.deegan-sanglyn.com
lists.deegansanglyn.com
lists.defenderoftheflow.com
lists.deliberate.com
lists.denisvengeance.com
lists.dental.ae
lists.design-interaction.com
lists.discohog.com
lists.divenet.com
lists.dixie-csa.net
lists.djsuperfox.com
lists.dlsc.us
lists.doctoramber.com
lists.domontgallery.com
lists.donaleensaul.com
lists.dorenesteggell.com
lists.inuverse.com
lists.joelhalpern.com
lists.johnjdomont.com
lists.kfjc.org
lists.lettiejones.com
lists.th-audio.net
lists.th-audio.org
lists.thaudio.org

Other certificates including the domain name brookfieldfarm.com

(limited to 100 certificates)
lists.nikibikidress.com
*.ishanvenkat.com
customers.tigertech.net
lists.0100101110101101.org
*.toronto-mortgage.ca
web13.tigertech.biz
lists.brookfieldfarm.com
lists.bigteezesalon.com
*.dappleandgray.com
customers.tigertech.net
customers.tigertech.net
*.galstyanlaw.com
*.centerpointci.com
lists.brookfieldfarm.com
customers.tigertech.net
lists.0100101110101101.org
web13.tigertech.biz
*.frankiestable.com
lists.0100101110101101.org
customers.tigertech.net
*.natividadfermin.com
lists.swimkingpools.com
web13.tigertech.biz
lists.dhaudioandhometheater.com
customers.tigertech.net
*.thespeedyturtle.com
lists.bigteezesalon.com
lists.mawturners.com
*.chaire-data-scientist.fr
*.oldtraffordfaithful.com
customers.tigertech.net
lists.brookfieldfarm.com
lists.upsstorage.com
*.ishanvenkat.com
web13.tigertech.biz
lists.0100101110101101.org
*.creativewoodfloors.net
*.fidalgoukulelenetwork.com
customers.tigertech.net
*.oldtraffordfaithful.com
lists.familyfitnessandfreedom.com
lists.celiet.com
*.thespeedyturtle.com
customers.tigertech.net
*.ishanvenkat.com
web13.tigertech.biz
web13.tigertech.biz
*.countryriverhomes.com
customers.tigertech.net
lists.rasterms.com
lists.iafflocal5031.org
lists.inuverse.com
lists.0100101110101101.org
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
lists.0100101110101101.org
web13.tigertech.biz
lists.brookfieldfarm.com
*.oldtraffordfaithful.com

Certificate

The complete raw certificate details for lists.brookfieldfarm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJHfFjriTRH2Wzc15ArF
e+g7bSEDD/bmQBvIzG++QR3L7W19/+kSb71BMOgvVIDZpcgvwX7fIkGJdevfnILm
QZqdNnmG52g+y9JoOE3yYaUmQsgWWbRY8mzZHCjXDOorW6+uMV/40C7RiuuLH9Wq
1ZQRCn/wFcanFD+KSTjbjxcloawABd/nrOv24c5yLR0qH+gVAQDi6ZZHsA2SZfvd
DhSnX5jGvHlTvEUlcLGk8h6VQiSNuXZedq8v8bYCaThKuwvYLa9cpqrpH7R9GBjC
vTntyrCfTv8RGHS+NDN1HVq3WToRlQJEEj04XcUUNugdyOM2ccnOBYSXYW+4BngY
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419989499589410809364559882090210541115354
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-24 07:26:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 07:26:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.brookfieldfarm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24309686438010488905831354453442404266253605059115381720402950745326854352159658512865834392177191885777416207294811536058795049109676781332315435634097961109356562899704370526527265356736053481939492444483102811947639291157896260325185487831294983932533418278144399215027838112086112023846002213023540143383776794534732583565033936039111056502528780706075083134574018234281603861653727506487849962192664100617491512471482156036049416311210607075041825770927749499893510841889236960892889506989695162235820860163360336977422292748717561569929982020753085796187755007616523875133904311988743579157444378501769835583739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b3f42a95d4a1b822d2a8a1d1fe45f747c198d1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2387 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.brookfieldfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.brownspath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bruinslca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bwajakarta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.byronbible.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cactroy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cafebacchus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callicomp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callicomp.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callihans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callihans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callihans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cambridgewomenscommission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.campaignforequaljustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.candiceheld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.capitalregionbluesnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.carolynmcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.carsplusdms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.carsplussoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.caryjohnfranklin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.catscradle.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cbcdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cedarbrookcamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cedarbrooktexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cej-oregon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.celebratelit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.celiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cementedtensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.centerforsustainableliving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cfms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chainsrequired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.championstoragetexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.charlespanderson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.charlottechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cheeseshopmystery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chicksingernight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.childrenshomeofkingston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chimneysweepenergycorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chkingston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chriskanther.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chuantaokungfu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.citypsych.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.civicorchestrampls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cliffrichardsongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.climateequityreference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.clj-usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.clroth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cobha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.codependents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.coffeesystemhv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.coffeesystemshv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cohousing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cohousingresearchnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.colemancatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.colemancatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.colemancatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.collectiveresilience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.comprotoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.connectingimmigrants.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.connecttosuccesspdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.conversation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.copakecountryclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cowgirlspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.crbn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cscohomail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.csrhoa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cuttingsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dabblewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dalecomputer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.danbrownandassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.danlavorel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dannybritt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deafbiographies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deegan-sanglyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deegansanglyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.defenderoftheflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deliberate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.denisvengeance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dental.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.design-interaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.discohog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.divenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dixie-csa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.djsuperfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dlsc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.doctoramber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.domontgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.donaleensaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dorenesteggell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.inuverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joelhalpern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.johnjdomont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kfjc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lettiejones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.th-audio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.th-audio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.thaudio.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001691e9c8323000004030046304402207c07bda8bc715f9996a1b2ced4cdac1560cbbf251fc85d818fff8cc5004fb33802203b5dd53f3f8eb8e3a9d10829ebe02e7c4203d35ef5cc6d8df6a3fadb635ce09400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001691e9c832500000403004730450220187269f5e1cd5eae6ea897d3e0e3bd1fc0d0055d0ecbed4ab7e9ca1cfda1c9c3022100a1ee8ec9030846b0a1a19f127ec072fd6af872481448f5a99b88f5aff0753416
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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