assetalignment.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bf:2f:92:1e:2e:6e:be:dd:79:f1:df:14:72:e4:6b:60:37 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assetalignment.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:2f:92:1e:2e:6e:be:dd:79:f1:df:14:72:e4:6b:60:37
Serial Number (int): 326394022280474281270321317314863523651639
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:44:0a:4b:19:77:7c:80:5e:16:e6:34:db:f6:17:86:e6:4b:81:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:e2:35:19:c9:68:e0:f8:a3:2c:e7:80:57:0c:a3:85:2c:c4:ad:22
Fingerprint (sha256): 36:76:20:c7:78:4f:82:54:c7:18:a1:e7:e7:7a:ab:df:c6:39:b7:c5:26:79:72:9d:a0:4e:91:d2:9c:03:0b:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate assetalignment.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assetalignment.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

51519111.com
assetalignment.com
boat-shipping.com
clock-tw.com
cn1gem.com
creditinsurers.com
defenderx.com
demoquest.com
detectmasters.com
dressedtowin.com
epicenterus.com
exchange-currency.com
fiberopticattenuators.com
get-lost.com
golfinsights.com
handsoffagency.com
hawaiistemcelltreatments.com
heyshape.com
kidovr.com
lifbars.com
louboutinshoesjpget.com
madeswiss.com
master-sports.com
masterfeet.com
memberpassport.com
mjlco.com
mountainhempspirits.com
myhutu.com
mysticmtngrowers.com
namingagents.com
neompics.com
overheardinternet.com
paodds.com
polypaint.com
qualogics.com
simosoft.com
sportsdoctorsdetroit.com
stimatchmakers.com
stopmasters.com
tastyblast.com
the-patent.com
thestomachflu.com
thewashingtonpatriot.com
tours.mex.com
tuffmax.com
uppersport.com
usabilityspecialist.com
vermontstemcelldoctors.com
worldmint.com
wreathcraft.com
www.51519111.com
www.assetalignment.com
www.boat-shipping.com
www.clock-tw.com
www.cn1gem.com
www.creditinsurers.com
www.defenderx.com
www.demoquest.com
www.detectmasters.com
www.dressedtowin.com
www.epicenterus.com
www.exchange-currency.com
www.fiberopticattenuators.com
www.get-lost.com
www.golfinsights.com
www.handsoffagency.com
www.hawaiistemcelltreatments.com
www.heyshape.com
www.kidovr.com
www.lifbars.com
www.louboutinshoesjpget.com
www.madeswiss.com
www.master-sports.com
www.masterfeet.com
www.memberpassport.com
www.mjlco.com
www.mountainhempspirits.com
www.myhutu.com
www.mysticmtngrowers.com
www.namingagents.com
www.neompics.com
www.overheardinternet.com
www.paodds.com
www.polypaint.com
www.qualogics.com
www.simosoft.com
www.sportsdoctorsdetroit.com
www.stimatchmakers.com
www.stopmasters.com
www.tastyblast.com
www.the-patent.com
www.thestomachflu.com
www.thewashingtonpatriot.com
www.tours.mex.com
www.tuffmax.com
www.uppersport.com
www.usabilityspecialist.com
www.vermontstemcelldoctors.com
www.worldmint.com
www.wreathcraft.com

Other certificates including the domain name assetalignment.com

(limited to 100 certificates)
assetalignment.com
rltfunding.com
www.comprayvenda.com
assetalignment.com
www.knee-replacement.com
assetalignment.com
assetalignment.com
assetalignment.com
assetalignment.com
sni.cloudflaressl.com
camoqueens.com
mainestemcelltreatmentcenters.com

Certificate

The complete raw certificate details for assetalignment.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YDJ5/Tj/cKKipYLXs3E
qnejLikfG2WpZyRiPR7w1q4RQ9FYtwcSknNc2rsn4VNpjP0jZIEBk1kBa5nL7Hrq
PY7PRofWDnqX5Qylvf+vPqIMpADjG+XwTYtaDnrvhfsVYJ5Zuv0Br06N8VQ3LduI
n0ymhkw+UFZFPJzEQXQlEJI+hQ8TQEd+jrdgARetXlMMu0X0CObxA6hK+M3lE3rc
DagJj4UoCZ2yPEpPEye1w+FLxf499+INVB77Y7ldM+q+eQbIATYuPPlUE2zJLaE1
LYyUlAihIaWoSPQO17gzSzTlOuUamkSHkJH1XMVIJNEgiku7LTS6K8aweBArsB6U
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326394022280474281270321317314863523651639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 13:03:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 13:03:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assetalignment.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29477033129883566232324963215294911937813928683393351567893122488504529921006934449813867003182309474556984754866432879729177081695671385637039289451984956247842840293493567268430633750527581398694013128911219768908441041257153920089937859790993684802932016844296572000311557551571674185546383297695280818774098627356566392168004331598536614085042114358599319459705747321098459445402807604842660127785793860924288715728587915370247325767788347298057819688625537080386070568246440729976840346900627162145288633369290443951045552691348981811746590820481416835464783315671992169046315142452352258263582412916528756200687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa440a4b19777c805e16e634dbf61786e64b811a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2002 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '51519111.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetalignment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boat-shipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clock-tw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn1gem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditinsurers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defenderx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detectmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dressedtowin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicenterus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange-currency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiberopticattenuators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get-lost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfinsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handsoffagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiistemcelltreatments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heyshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidovr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifbars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louboutinshoesjpget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeswiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master-sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterfeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberpassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjlco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainhempspirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhutu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysticmtngrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namingagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neompics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overheardinternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paodds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polypaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualogics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsdoctorsdetroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stimatchmakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tastyblast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-patent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestomachflu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewashingtonpatriot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tours.mex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuffmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uppersport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usabilityspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vermontstemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldmint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wreathcraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.51519111.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetalignment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boat-shipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clock-tw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cn1gem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditinsurers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defenderx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demoquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detectmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dressedtowin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicenterus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exchange-currency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiberopticattenuators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.get-lost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfinsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handsoffagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiistemcelltreatments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heyshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidovr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifbars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louboutinshoesjpget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madeswiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.master-sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterfeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memberpassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mjlco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainhempspirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhutu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysticmtngrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.namingagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neompics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overheardinternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paodds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polypaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualogics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsdoctorsdetroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stimatchmakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tastyblast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-patent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestomachflu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thewashingtonpatriot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tours.mex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuffmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uppersport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usabilityspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontstemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldmint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wreathcraft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d782f17e4000004030047304502206d058f112c9807a375a51c49e7c0738b8421da80782fa10bb52b55eebffa786b022100f63e1aee5d618e26ac6904042feb6f12e4243e4b06245f95f21f98d855b09ace00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d782f17b60000040300483046022100ecd1573767da33044a8d2d6a365af018f1ff7ea54f5ba80b6ec60ecb38b53594022100dba23a7c14ff9ca6ea36440742a21c48e3ba8730bebf1d76a71bd1c884bf50a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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