customers.tigertech.net

Issued by R3

About this certificate

This digital certificate with serial number 04:66:81:39:fe:70:f9:48:9a:92:9f:e1:e4:f4:92:f6:da:d8 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=customers.tigertech.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:66:81:39:fe:70:f9:48:9a:92:9f:e1:e4:f4:92:f6:da:d8
Serial Number (int): 383329716686036643561714829723477571197656
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e1:04:dd:5d:05:a8:9e:69:56:14:95:1a:77:0f:39:e5:13:6a:16:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:e3:53:39:1a:66:a6:77:2c:8e:db:c2:86:e7:c8:ff:ef:a4:14:26
Fingerprint (sha256): 2b:d6:ca:a6:ab:32:ce:a7:27:83:17:0e:2c:b5:26:7d:53:73:2e:b7:74:d4:11:40:5f:21:11:32:1f:7b:9a:83

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate customers.tigertech.net

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customers.tigertech.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.akingstonbedandbreakfast.com
*.alittlebitoflip.com
*.americaswarriorsbooks.com
*.contourparquet.com
*.craigandchris.org
*.dhfineartist.com
*.graceportland.org
*.harrihoffmannfamilyfoundation.com
*.kathryn-barrett.com
*.kidslearntofish.com
*.marketinglandmines.com
*.mypersonalstyleonline.com
*.ogreadingspecialist.com
*.petanquelafayette.org
*.regenesoilfarms.com
*.the30dayva.com
*.theabqshow.com
*.thesparrowpost.com
*.trpa-stem.org
*.trublueroofingnc.com
*.urbanmaplecreative.com
*.wallysentme.com
*.watertowncitizensforblacklives.com
*.yourbullyingtacticis.com
akingstonbedandbreakfast.com
alittlebitoflip.com
americaswarriorsbooks.com
contourparquet.com
craigandchris.org
customers.tigertech.net
dhfineartist.com
graceportland.org
harrihoffmannfamilyfoundation.com
kathryn-barrett.com
kidslearntofish.com
marketinglandmines.com
mypersonalstyleonline.com
ogreadingspecialist.com
petanquelafayette.org
regenesoilfarms.com
the30dayva.com
theabqshow.com
thesparrowpost.com
trpa-stem.org
trublueroofingnc.com
urbanmaplecreative.com
wallysentme.com
watertowncitizensforblacklives.com
yourbullyingtacticis.com

Other certificates including the domain name tigertech.net

(limited to 100 certificates)
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.aspenhillfilms.com
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.academy.customers.tigertech.net
*.tigertech.net
*.tigertech.net
customers.tigertech.net
*.aconspiracyofauthors.com
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
web02.tigertech.net
customers.tigertech.net
customers.tigertech.net
web02.tigertech.net
customers.tigertech.net
*.jp.customers.tigertech.net
customers.tigertech.net
*.ae.customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.academy.customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
web01.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.16photographs.com
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
web01.tigertech.net
customers.tigertech.net
*.acmilancentral.com
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
web01.tigertech.net
*.aoassociates.biz
customers.tigertech.net
*.aflowerlife.com
*.a1autotinting.com
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
web02.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.1918.me
customers.tigertech.net

Certificate

The complete raw certificate details for customers.tigertech.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbUZID2tiF2SGnvHNJF1
NjuMZlTlO1P065z4XuVlPoKT8lvxqSfZMyyYAn0B768y50QhMBeYdIup/JUfjRZS
3Ddfokq2Hl3oC/FFmXpSxm/pDPnQJk95IvXJziGqam9NpuVrXoRR1g09c0Ts8EO7
qmqD/P5HqZJdqcoImDBYBAAFdtyOiJS/Eaa5DZXzG2YgBMXsM85Zze9vDsqSrlBN
eJw+O2lxPknea3cYt9nI8oFtl+8Xp3NN+lPPKWnQXPKl1ZSC6YYvXcr1z4bj9vgS
2i3yIA6gvECkVuoXtmpWmY3IN3YxeJ3NDiMycgLL2oWxkNV0El1Ymiy5p3g/PF7E
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383329716686036643561714829723477571197656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 09:27:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 09:27:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'customers.tigertech.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22433482804235389991372466963032475268422776637501221706805808108443276405408086437007123520790351795026189291767800519952191080351077113062946575016952581007871834121250379986628030630601404241394487980401038766242137969403421884610258149199476502122119391511766373396475652704821989943909217521435231363471416277095685826482988715268061549264213687752663693291406993137602363932318579986407878519464750335084686306942068133317589642996889718218919880973140952023382351499833769059461446082139745390977799394744787732344562886686192277935009501418437943815561782055176733895829969045224011228570384774865594454295787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e104dd5d05a89e695614951a770f39e5136a16e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akingstonbedandbreakfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alittlebitoflip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americaswarriorsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contourparquet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craigandchris.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dhfineartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graceportland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrihoffmannfamilyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathryn-barrett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidslearntofish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketinglandmines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypersonalstyleonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ogreadingspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petanquelafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regenesoilfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the30dayva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theabqshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesparrowpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trpa-stem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trublueroofingnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbanmaplecreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wallysentme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watertowncitizensforblacklives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourbullyingtacticis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akingstonbedandbreakfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alittlebitoflip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americaswarriorsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contourparquet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craigandchris.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.tigertech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhfineartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graceportland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrihoffmannfamilyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathryn-barrett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidslearntofish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketinglandmines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonalstyleonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogreadingspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petanquelafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regenesoilfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the30dayva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theabqshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesparrowpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trpa-stem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trublueroofingnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanmaplecreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallysentme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watertowncitizensforblacklives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourbullyingtacticis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c62b80a01000004030046304402205b77f1f9c0fcdabf5bba909e9e51794c4e9b2c07cf693d66ca3bf5ad43f64148022010941f5847296b7a83c0e0803958ad42c7f0712b838cbb65e8799a9df8b4352200760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c62b80ac60000040300473045022006010f379a0f8aa416d779d50f09daaec96a7d55cc9a69ad7b0e708ceadebcae02210097a9d3ab54fadcb9975d66873ed121f24573098a49e76f25bfa46631c6c9eb52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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