lundag.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:59:d3:b5:c5:92:00:32:bf:51:4a:1d:db:fb:6a:58:35 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lundag.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:59:d3:b5:c5:92:00:32:bf:51:4a:1d:db:fb:6a:58:35
Serial Number (int): 319984825458713435344234037158023780784181
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:68:ff:f2:27:be:db:de:ed:ff:ad:b8:f5:f6:99:b8:58:c3:bf:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:15:0b:62:e5:e0:d7:e4:51:4a:5d:f6:e2:90:6a:5b:35:36:7e:3e
Fingerprint (sha256): 35:6b:4d:a1:34:4d:97:1a:41:d0:a1:d2:8b:39:2c:6a:53:f1:c7:86:a9:ec:8b:93:a7:95:71:9a:7a:ed:2f:4b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lundag.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lundag.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alexiades.com
*.alicinha.com
*.alltechmonster.com
*.americahaschanged.com
*.arlingtonracetrack.com
*.baozhang.com
*.bason.com
*.beautifulest.com
*.chardonette.com
*.cimiteri.com
*.clubedeamigos.com
*.conmcast.com
*.darktan.com
*.datifi.com
*.degenhardt.com
*.efiel.com
*.espirulina.com
*.fairhondapartsforyou.com
*.free-poker.com
*.frentress.com
*.friosur.com
*.gailing.com
*.incestquest.com
*.jiaoliang.com
*.kaitei.com
*.kontanti.com
*.kosatka.com
*.koveleski.com
*.lammons.com
*.lavenstein.com
*.leggetts.com
*.lstores.com
*.lundag.com
*.managementattorneys.com
*.moonmansion.com
*.mysterybooks.com
*.nehari.com
*.outsourcinginfo.com
*.oversdtock.com
*.podcastchicago.com
*.samuivilla.com
*.schenkelberg.com
*.sustancia.com
*.thegaptrap.com
*.universalismo.com
*.utahcomposites.com
*.vahia.com
*.weavin.com
*.xrms.com
*.zadasearch.com
alexiades.com
alicinha.com
alltechmonster.com
americahaschanged.com
arlingtonracetrack.com
baozhang.com
bason.com
beautifulest.com
chardonette.com
cimiteri.com
clubedeamigos.com
conmcast.com
darktan.com
datifi.com
degenhardt.com
efiel.com
espirulina.com
fairhondapartsforyou.com
free-poker.com
frentress.com
friosur.com
gailing.com
incestquest.com
jiaoliang.com
kaitei.com
kontanti.com
kosatka.com
koveleski.com
lammons.com
lavenstein.com
leggetts.com
lstores.com
lundag.com
managementattorneys.com
moonmansion.com
mysterybooks.com
nehari.com
outsourcinginfo.com
oversdtock.com
podcastchicago.com
samuivilla.com
schenkelberg.com
sustancia.com
thegaptrap.com
universalismo.com
utahcomposites.com
vahia.com
weavin.com
xrms.com
zadasearch.com

Other certificates including the domain name lundag.com

(limited to 100 certificates)
theurbanlounge.com
lundag.com
oxycodoneabuse.com
dowjonesindex.com
tesex.com
arxitekton.com

Certificate

The complete raw certificate details for lundag.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319984825458713435344234037158023780784181
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 18:10:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-12 18:10:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lundag.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818445100262761152070306942330462249723747701702500948929819949631153825933243832253631594923666241194907910736343629786300193866651852520739187106874898890633383678511303729661354064908442409922987353316880935036578665784088451328294607194078395618950070434033056043512543579792042654522336845534865911720608531906415516517338617424138984701289017635917110704938611229942716303259489754421729910041197598222785315407549718318459965235491238450292631381065325448357514045772787614871561933871791283806999637613989322195630516284564942274186036124950007270841337046267965073766210382757362177937762170868128275634514082797133456808037407970961182670904338015026671913506799493012039293004437317994139332189001887438805837967086428831271920082025246137702871188406934165292703867493931668322051432096386463648196002762723344184197169159526774403979629438549043659115222356073204505041513190531510190955893930452149690873503115981608556529259173007191354227319688965622584342694163672170037217313580831841501093884711808045387221294566751744426031525327869590212214402256496936622482111102479113652433422081675177720783256003372532069925268966505348265820099005944233788708510033123411225885668068984988709350794925300600362118336052887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6968fff227bedbdeedffadb8f5f699b858c3bf42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1684 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexiades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alicinha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alltechmonster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americahaschanged.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arlingtonracetrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baozhang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bason.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beautifulest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chardonette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cimiteri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubedeamigos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conmcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darktan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.degenhardt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espirulina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairhondapartsforyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.free-poker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frentress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friosur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.incestquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiaoliang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaitei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kontanti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kosatka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koveleski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lammons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavenstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leggetts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lundag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managementattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moonmansion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysterybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nehari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outsourcinginfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oversdtock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.podcastchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samuivilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schenkelberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sustancia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegaptrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universalismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utahcomposites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vahia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weavin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zadasearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexiades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alicinha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alltechmonster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americahaschanged.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arlingtonracetrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baozhang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bason.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautifulest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chardonette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimiteri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubedeamigos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conmcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darktan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'degenhardt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espirulina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairhondapartsforyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'free-poker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frentress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friosur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incestquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiaoliang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaitei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kontanti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosatka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koveleski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lammons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavenstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leggetts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lundag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managementattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonmansion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysterybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nehari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsourcinginfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oversdtock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcastchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samuivilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schenkelberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustancia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegaptrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahcomposites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vahia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weavin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zadasearch.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ab7c102470000040300483046022100f04076bd6f2baf2e2f93785b950c428a4f91266a24fca401684ac22ac19bc206022100ee06366ba54527b4798ed47c0581e7d0eb0b3ad0de4e5da4788b4ef6b79db260007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ab7c1044a0000040300473045022100dc9c2adf162386a143e450af8d83161e6a197437555d82d3f1aafeda9d85a40002200c5e09a4cdd75a85e1c4e0fcb7442482815692e99d075f8215fcc8d3d959984d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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