lists.brookfieldfarm.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4c:88:c1:11:14:f3:db:27:f2:f2:b1:50:76:5a:63:ab:8f was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lists.brookfieldfarm.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:88:c1:11:14:f3:db:27:f2:f2:b1:50:76:5a:63:ab:8f
Serial Number (int): 374492381080213751903317951480449416276879
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:3f:42:a9:5d:4a:1b:82:2d:2a:8a:1d:1f:e4:5f:74:7c:19:8d:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:3b:be:ad:54:d3:5b:93:15:54:20:9d:d0:81:9f:a4:82:59:8e:72
Fingerprint (sha256): 37:22:e8:1e:35:fd:52:60:59:2e:62:de:98:f1:58:bb:93:74:31:05:eb:fd:f5:b6:14:47:94:37:ab:d0:e1:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lists.brookfieldfarm.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.brookfieldfarm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.brookfieldfarm.com
lists.brownspath.com
lists.bruinslca.com
lists.bwajakarta.org
lists.byronbible.org
lists.cactroy.org
lists.cafebacchus.net
lists.callicomp.com
lists.callicomp.info
lists.callihans.com
lists.callihans.net
lists.callihans.org
lists.cambridgewomenscommission.org
lists.campaignforequaljustice.org
lists.candiceheld.com
lists.capitalregionbluesnetwork.org
lists.carolynmcc.com
lists.carsplusdms.com
lists.carsplussoftware.com
lists.caryjohnfranklin.com
lists.catscradle.us
lists.cbcdc.org
lists.cedarbrookcamps.org
lists.cedarbrooktexas.com
lists.cej-oregon.org
lists.celebratelit.com
lists.celiet.com
lists.cementedtensions.com
lists.centerforsustainableliving.org
lists.cfms.org
lists.chainsrequired.com
lists.championstoragetexas.com
lists.charlespanderson.com
lists.charlottechurch.org
lists.cheeseshopmystery.com
lists.chicksingernight.com
lists.childrenshomeofkingston.org
lists.chimneysweepenergycorp.com
lists.chkingston.org
lists.chriskanther.com
lists.chuantaokungfu.com
lists.citypsych.net
lists.civicorchestrampls.org
lists.cliffrichardsongs.com
lists.climateequityreference.org
lists.clj-usa.org
lists.clroth.com
lists.cobha.org
lists.codependents.org
lists.coffeesystemhv.com
lists.coffeesystemshv.com
lists.cohousing.org
lists.cohousingresearchnetwork.org
lists.collectiveresilience.com
lists.comprotoner.com
lists.connectingimmigrants.org
lists.connecttosuccesspdx.com
lists.conversation.ca
lists.copakecountryclub.com
lists.cowgirlspirit.org
lists.crbn.org
lists.cscohomail.org
lists.csrhoa.org
lists.cuttingsys.com
lists.dabblewood.com
lists.dalecomputer.com
lists.danbrownandassociates.com
lists.danlavorel.com
lists.dannybritt.com
lists.deafbiographies.com
lists.deegan-sanglyn.com
lists.deegansanglyn.com
lists.defenderoftheflow.com
lists.deliberate.com
lists.denisvengeance.com
lists.dental.ae
lists.design-interaction.com
lists.discohog.com
lists.divenet.com
lists.dixie-csa.net
lists.djsuperfox.com
lists.dlsc.us
lists.doctoramber.com
lists.domontgallery.com
lists.donaleensaul.com
lists.dorenesteggell.com
lists.inuverse.com
lists.joelhalpern.com
lists.johnjdomont.com
lists.kfjc.org
lists.lettiejones.com
lists.th-audio.net
lists.th-audio.org
lists.thaudio.org

Other certificates including the domain name brookfieldfarm.com

(limited to 100 certificates)
lists.nikibikidress.com
*.ishanvenkat.com
customers.tigertech.net
lists.0100101110101101.org
*.toronto-mortgage.ca
web13.tigertech.biz
lists.brookfieldfarm.com
lists.bigteezesalon.com
*.dappleandgray.com
customers.tigertech.net
customers.tigertech.net
*.galstyanlaw.com
*.centerpointci.com
lists.brookfieldfarm.com
customers.tigertech.net
lists.0100101110101101.org
web13.tigertech.biz
*.frankiestable.com
lists.0100101110101101.org
customers.tigertech.net
*.natividadfermin.com
lists.swimkingpools.com
web13.tigertech.biz
lists.dhaudioandhometheater.com
customers.tigertech.net
*.thespeedyturtle.com
lists.bigteezesalon.com
lists.mawturners.com
*.chaire-data-scientist.fr
*.oldtraffordfaithful.com
customers.tigertech.net
lists.brookfieldfarm.com
lists.upsstorage.com
*.ishanvenkat.com
web13.tigertech.biz
lists.0100101110101101.org
*.creativewoodfloors.net
*.fidalgoukulelenetwork.com
customers.tigertech.net
*.oldtraffordfaithful.com
lists.familyfitnessandfreedom.com
lists.celiet.com
*.thespeedyturtle.com
customers.tigertech.net
*.ishanvenkat.com
web13.tigertech.biz
web13.tigertech.biz
*.countryriverhomes.com
customers.tigertech.net
lists.rasterms.com
lists.iafflocal5031.org
lists.inuverse.com
lists.0100101110101101.org
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
lists.0100101110101101.org
web13.tigertech.biz
lists.brookfieldfarm.com
*.oldtraffordfaithful.com

Certificate

The complete raw certificate details for lists.brookfieldfarm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJHfFjriTRH2Wzc15ArF
e+g7bSEDD/bmQBvIzG++QR3L7W19/+kSb71BMOgvVIDZpcgvwX7fIkGJdevfnILm
QZqdNnmG52g+y9JoOE3yYaUmQsgWWbRY8mzZHCjXDOorW6+uMV/40C7RiuuLH9Wq
1ZQRCn/wFcanFD+KSTjbjxcloawABd/nrOv24c5yLR0qH+gVAQDi6ZZHsA2SZfvd
DhSnX5jGvHlTvEUlcLGk8h6VQiSNuXZedq8v8bYCaThKuwvYLa9cpqrpH7R9GBjC
vTntyrCfTv8RGHS+NDN1HVq3WToRlQJEEj04XcUUNugdyOM2ccnOBYSXYW+4BngY
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374492381080213751903317951480449416276879
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 06:25:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 06:25:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.brookfieldfarm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24309686438010488905831354453442404266253605059115381720402950745326854352159658512865834392177191885777416207294811536058795049109676781332315435634097961109356562899704370526527265356736053481939492444483102811947639291157896260325185487831294983932533418278144399215027838112086112023846002213023540143383776794534732583565033936039111056502528780706075083134574018234281603861653727506487849962192664100617491512471482156036049416311210607075041825770927749499893510841889236960892889506989695162235820860163360336977422292748717561569929982020753085796187755007616523875133904311988743579157444378501769835583739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b3f42a95d4a1b822d2a8a1d1fe45f747c198d1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2306 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.brookfieldfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.brownspath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bruinslca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bwajakarta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.byronbible.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cactroy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cafebacchus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callicomp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callicomp.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callihans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callihans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callihans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cambridgewomenscommission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.campaignforequaljustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.candiceheld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.capitalregionbluesnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.carolynmcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.carsplusdms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.carsplussoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.caryjohnfranklin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.catscradle.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cbcdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cedarbrookcamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cedarbrooktexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cej-oregon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.celebratelit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.celiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cementedtensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.centerforsustainableliving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cfms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chainsrequired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.championstoragetexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.charlespanderson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.charlottechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cheeseshopmystery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chicksingernight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.childrenshomeofkingston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chimneysweepenergycorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chkingston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chriskanther.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chuantaokungfu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.citypsych.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.civicorchestrampls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cliffrichardsongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.climateequityreference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.clj-usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.clroth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cobha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.codependents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.coffeesystemhv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.coffeesystemshv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cohousing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cohousingresearchnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.collectiveresilience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.comprotoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.connectingimmigrants.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.connecttosuccesspdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.conversation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.copakecountryclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cowgirlspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.crbn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cscohomail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.csrhoa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cuttingsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dabblewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dalecomputer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.danbrownandassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.danlavorel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dannybritt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deafbiographies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deegan-sanglyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deegansanglyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.defenderoftheflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deliberate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.denisvengeance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dental.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.design-interaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.discohog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.divenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dixie-csa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.djsuperfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dlsc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.doctoramber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.domontgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.donaleensaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dorenesteggell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.inuverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joelhalpern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.johnjdomont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kfjc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lettiejones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.th-audio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.th-audio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.thaudio.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a2509b84400000403004830460221009842fa67188d1900e0978714cb1094515b71d499481b879c9f120597bb9af5d6022100d4b4a62b49a870d02c04513cdf355493df4c62bf84feca5e289d758bd2b85322007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a2509b8410000040300473045022100f016cbe19ba2947a403c365d09c3480d9d44e263bc4d5282af5d4d24eb359abf022015e11e8ffb662076d95374c2c0f0ba77058cc59a31f86c5ef52171dc8ceee6e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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