*.ruinasdebonampak.edu.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:38:5e:ae:f5:bc:c2:2d:bc:80:be:ff:40:23:82:58:28:6d was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ruinasdebonampak.edu.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:38:5e:ae:f5:bc:c2:2d:bc:80:be:ff:40:23:82:58:28:6d
Serial Number (int): 367630812150016050523592915943081247254637
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:98:90:fb:89:85:81:44:ed:c9:d2:72:45:7c:f3:05:ea:9e:c3:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:0d:f4:fd:14:8b:cc:fc:68:f7:19:db:f6:06:ac:e1:6f:88:67:0f
Fingerprint (sha256): 2e:82:44:6b:40:a6:f5:e8:85:85:de:d6:04:99:5a:03:1f:c7:c8:fa:e6:71:ad:a4:28:d6:70:b4:6b:ca:bf:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.ruinasdebonampak.edu.mx

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ruinasdebonampak.edu.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abcptg.com
*.ashbylumber.com
*.aspiryon.net
*.benefitbrownies.org
*.bridgetmckenna.com
*.carbonmarketwatch.org
*.claudiajohnson.com
*.dripawesome.com
*.echovalleyfarm.net
*.editingmckennas.com
*.emcglonelaw.com
*.fortuneandframe.com
*.gobibmw.com
*.gobichevy.com
*.gobiford.com
*.gobigmc.com
*.gobihonda.com
*.gobihummer.com
*.gobiminicooper.com
*.gobinissan.com
*.gobiracks.com
*.gobitoyota.com
*.gobivolvo.com
*.hearingyouthvoices.com
*.hereineden.com
*.loveeconomypress.org
*.mhdpix.com
*.nationwidetitlegroup.com
*.naurazitromusic.com
*.nicoleodell.com
*.oaklandindieawards.com
*.pandgyachting.com
*.perryvilleevents.com
*.ph-ph.org
*.pittsborodrywallrepair.com
*.precisionconcretestructures.com
*.proudtree.com
*.rightonrochesteryouth.org
*.rikallen.com
*.robschermerhorn.com
*.ruairiobrien.com
*.ruinasdebonampak.edu.mx
*.shirleycrow.com
*.spyingondemocracy.com
*.thedietcouncil.com
*.topperformancegolf.com
*.tscarpetcleaning.co.uk
*.yourenothelping.com
*.zone1design.com
abcptg.com
ashbylumber.com
aspiryon.net
benefitbrownies.org
bridgetmckenna.com
carbonmarketwatch.org
claudiajohnson.com
dripawesome.com
echovalleyfarm.net
editingmckennas.com
emcglonelaw.com
fortuneandframe.com
gobibmw.com
gobichevy.com
gobiford.com
gobigmc.com
gobihonda.com
gobihummer.com
gobiminicooper.com
gobinissan.com
gobiracks.com
gobitoyota.com
gobivolvo.com
hearingyouthvoices.com
hereineden.com
loveeconomypress.org
mhdpix.com
nationwidetitlegroup.com
naurazitromusic.com
nicoleodell.com
oaklandindieawards.com
pandgyachting.com
perryvilleevents.com
ph-ph.org
pittsborodrywallrepair.com
precisionconcretestructures.com
proudtree.com
rightonrochesteryouth.org
rikallen.com
robschermerhorn.com
ruairiobrien.com
ruinasdebonampak.edu.mx
shirleycrow.com
spyingondemocracy.com
thedietcouncil.com
topperformancegolf.com
tscarpetcleaning.co.uk
yourenothelping.com
zone1design.com

Other certificates including the domain name ruinasdebonampak.edu.mx

(limited to 100 certificates)
*.supportmyschool.co.uk
customers.tigertech.net
*.ruinasdebonampak.edu.mx
lists.unityhawaii.org
*.supportmyschool.co.uk
lists.nikibikidress.com
customers.tigertech.net
web11.tigertechnologies.com
customers.tigertech.net
ruinasdebonampak.edu.mx
lists.skatekey.net
ruinasdebonampak.edu.mx
*.ruinasdebonampak.edu.mx
*.ruinasdebonampak.edu.mx
*.supportmyschool.co.uk
customers.tigertech.net
*.ruinasdebonampak.edu.mx
ruinasdebonampak.edu.mx
*.ruinasdebonampak.edu.mx
ruinasdebonampak.edu.mx
*.ruinasdebonampak.edu.mx
customers.tigertech.net
*.ruinasdebonampak.edu.mx
web11.tigertechnologies.com
lists.th-audio.net
ruinasdebonampak.edu.mx
customers.tigertech.net
*.supportmyschool.co.uk
lists.southbayclub.org
lists.waco-ak.org
*.supportmyschool.co.uk
ruinasdebonampak.edu.mx
*.supportmyschool.co.uk
web11.tigertechnologies.com
lists.dabblewood.com
*.supportmyschool.co.uk
*.supportmyschool.co.uk
*.ruinasdebonampak.edu.mx
customers.tigertech.net
*.ruinasdebonampak.edu.mx
customers.tigertech.net
ruinasdebonampak.edu.mx
customers.tigertech.net
lists.familyfitnessandfreedom.com
ruinasdebonampak.edu.mx
*.ruinasdebonampak.edu.mx
lists.celiet.com
*.ruinasdebonampak.edu.mx
lists.dottywood.org
web11.tigertechnologies.com
ruinasdebonampak.edu.mx
*.ruinasdebonampak.edu.mx
lists.dottywood.org
lists.prairievillage.org
ruinasdebonampak.edu.mx
customers.tigertech.net
web11.tigertech.net
*.supportmyschool.co.uk
customers.tigertech.net
*.supportmyschool.co.uk
lists.grandsquares.com
lists.dottywood.org
*.ruinasdebonampak.edu.mx
lists.dabblewood.com
lists.dabblewood.com
web11.tigertechnologies.com
lists.brookfieldfarm.com

Certificate

The complete raw certificate details for *.ruinasdebonampak.edu.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVCbMg44XXDZBbjYs43l
ZOc2i8k6RXZxtd9NBUURVWwvEVkOm6rCVVW5VP3LYZ1VRuSgKLn7+ihGlRG3oUGI
e57oASbOnXSVchkQHuDyskuAelVgMDe1BeBXa7CWPkfockglyIk1mAq5uj4CEV82
XqNLJ5H25M2nJAMlmnSLsRWP4exaaTCsMnx15XXJyFe1EXids5a/3AXJB574MeXc
effFh0hB2LYhJKoNskORVqhyguDdHWHDDj/jONi6zJ6EkkHUS/8LOzsbCh9GtEu+
voIOO2pvQ3AdssqqHpBNCYqWL+bNY++e+2ywzW0bHby3dKfz3D+/+DhBcModDk+o
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367630812150016050523592915943081247254637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-04 08:15:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-04 08:15:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ruinasdebonampak.edu.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23898788053292798754256238358322725908472676863497141772531178051273468515256074757777413002785122028606792513688837370473450877156306577536917910441231456751513090585598705941342062466130801558155785241369603993388066416137599080198882047600520307408821496874076952355792489015258910329631767444441669889471999535148250813621784619068106488269517774770708888630235821423807330306502653535677644409816496175133926517669145651762798837005608000300881689155049496198595678543145774442883377445168467991986621230818807766231217930948372288633482736748974365373892739340944261628273273651776933430469262756849451428456609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e29890fb89858144edc9d272457cf305ea9ec3b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1966 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcptg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashbylumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspiryon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benefitbrownies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bridgetmckenna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbonmarketwatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claudiajohnson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dripawesome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echovalleyfarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.editingmckennas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emcglonelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortuneandframe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobibmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobichevy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobiford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobigmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobihonda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobihummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobiminicooper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobinissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobiracks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobitoyota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobivolvo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearingyouthvoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hereineden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loveeconomypress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mhdpix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationwidetitlegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naurazitromusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicoleodell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oaklandindieawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pandgyachting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perryvilleevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ph-ph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pittsborodrywallrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precisionconcretestructures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proudtree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rightonrochesteryouth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rikallen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robschermerhorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruairiobrien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruinasdebonampak.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirleycrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spyingondemocracy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedietcouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topperformancegolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tscarpetcleaning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourenothelping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zone1design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcptg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashbylumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspiryon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitbrownies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgetmckenna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonmarketwatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claudiajohnson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dripawesome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echovalleyfarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editingmckennas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emcglonelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortuneandframe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobibmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobichevy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobiford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobigmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobihonda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobihummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobiminicooper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobinissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobiracks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobitoyota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobivolvo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearingyouthvoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hereineden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveeconomypress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhdpix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationwidetitlegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naurazitromusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicoleodell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaklandindieawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandgyachting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perryvilleevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ph-ph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pittsborodrywallrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisionconcretestructures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proudtree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightonrochesteryouth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rikallen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robschermerhorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruairiobrien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruinasdebonampak.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirleycrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spyingondemocracy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedietcouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topperformancegolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tscarpetcleaning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourenothelping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zone1design.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016778805a0e0000040300463044022054708e82e4675606ade4bf48b3bd0d8996415f6088be7afe5e59bcbcd4032a53022043c65ef2bf7b57439a13554966299cec535e958bd29117b6a4ab3bf088ec4b4c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016778805a030000040300473045022100a5e2819e027767b5469b7946294372e44e748cc6a9191a438484daabbe7b99fa02203c1d61ce4ee6b41f737786514a199186f051a6cd72203b0fb8ef6bfbe154c195
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0015def9df4aa3b7a112f1548d60b3dc85301e44a79e07da80ed5fe42530b3c59e085108ae868169c3ffe97991d7e3c03d7ecbd5fdcbdb26151749886ef4ed52a73cdfde3e87d47039e147a09d7e6b4e9a15eba2ae6844028ecd1cbc0e4ae1f1aa6c049a186cab2ab9d5aa18274566716a0d2422ec3b3ef745438a13a3289128c8b27933614203301231bfe92bffa56b941416685eb2abe7137c4634092045c926825d56e698d29e1354c272b3b6fc593d90d1720c0db72cb12cd1bcbf92d3137bd63e324f71615f6af40289ca45921cb3c386c38b5339469a240d60c32d453944ce46df8a4692de3246c2fdd89cf090f6587705aebcd4d28217c5d152dc9d9a1b