www.tofuga.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:be:9a:60:14:60:03:24:ae:40:07:65:5d:42:ec:48:ee was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tofuga.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:be:9a:60:14:60:03:24:ae:40:07:65:5d:42:ec:48:ee
Serial Number (int): 288472519663675826494570305573814929213678
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 00:43:5a:72:62:96:d2:01:8e:c8:1d:2f:83:2e:7a:56:80:64:3c:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:dc:41:6c:9e:c9:a1:5a:3b:de:b3:93:ba:1c:d9:47:ca:a5:4a:b0
Fingerprint (sha256): 3a:e0:c8:a5:38:ed:16:1f:0a:50:0c:0c:53:ed:b1:fa:63:49:a3:fe:28:89:14:3b:83:a7:b1:eb:4c:55:e0:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tofuga.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tofuga.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

805leaf.com
amoxicillina.com
asaxaterra.org
bankingintelligence.com
bikeframesize.com
causetravelmagazine.com
chizled.com
coatmed.com
courtrecordsonline.com
cutertogether.org
drcrealestate.com
droneimaging.com
drop-off.com
dudetama.com
e-of.com
fakegig.com
genetics23.com
greensborosportsmedicine.com
havit.exposed
hawaiismarijuana.com
hippo-golf.com
informationists.ch
internetsampling.com
jointpaintallahassee.com
judgingthejudge.com
lg.id
mobileregenerativemedicine.com
motherofone.org
nigeriarealestate.mobi
offertehotelischia.com
oraesatta.com
ownthehddvd.com
pictureridge.com
premeditate.com
projectbelize.com
qarmy.org
reisavingsclub.com
rottweilerlab.com
shielded-case.com
showshare.com
stdmatchmaker.org
stemcellmontana.com
stjohns.college
stressandstoke.com
tickbitefirstaidkit.org
tickremoval.org
tofuga.com
trimmforhouse.com
whatshoulditakepicturesof.com
www.805leaf.com
www.amoxicillina.com
www.asaxaterra.org
www.bankingintelligence.com
www.bikeframesize.com
www.causetravelmagazine.com
www.chizled.com
www.coatmed.com
www.courtrecordsonline.com
www.cutertogether.org
www.drcrealestate.com
www.droneimaging.com
www.drop-off.com
www.dudetama.com
www.e-of.com
www.fakegig.com
www.genetics23.com
www.greensborosportsmedicine.com
www.havit.exposed
www.hawaiismarijuana.com
www.hippo-golf.com
www.informationists.ch
www.internetsampling.com
www.jointpaintallahassee.com
www.judgingthejudge.com
www.lg.id
www.mobileregenerativemedicine.com
www.motherofone.org
www.nigeriarealestate.mobi
www.offertehotelischia.com
www.oraesatta.com
www.ownthehddvd.com
www.pictureridge.com
www.premeditate.com
www.projectbelize.com
www.qarmy.org
www.reisavingsclub.com
www.rottweilerlab.com
www.shielded-case.com
www.showshare.com
www.stdmatchmaker.org
www.stemcellmontana.com
www.stjohns.college
www.stressandstoke.com
www.tickbitefirstaidkit.org
www.tickremoval.org
www.tofuga.com
www.trimmforhouse.com
www.whatshoulditakepicturesof.com

Other certificates including the domain name tofuga.com

(limited to 100 certificates)
budtendersalmanac.com
ilia.org
nudedog.com
www.amoxicillina.com
www.siouxcitystemcellclinic.com
683.me
www.tofuga.com
www.theimaginationagency.site
www.madamevape.com
www.enviroheat.org
www.madamevape.com
loviesforall.com
malagasytsimihety.bible
4-4.org
www.flexable.care
salvagetrade.com
www.coralli.com
www.ealive.com
www.maggiorragione.com
boater.world
www.steinaw.nl
net.cleaning
sanpietroinlama.org
www.entropics.com
showshare.com

Certificate

The complete raw certificate details for www.tofuga.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sJt2laY7VhO3TftFYTj
nTAKkF3x6JqfBEvrUtdrdkf7ZvpKSjGLpMZwHXgfzU2Q78iSFx3YX6j6hnynRR9E
/VK1oFyI5p2YFN/O6BzEDIhmIj3WRZ9hHuQKT9rjxHtN/s/Ayd0AOUFAbk0L20BW
MNdhd01VGSX8mi9kUnxF7jPeETOKxVQzAIfVl112glf4JO0Dn/3k1uvGKnEBv2fU
jHzEtizRW8wo6o0g/0wBGXOFNwzFrmXibiwW9/4YLq4OQxX15G5EUHNdKlenrZ3S
UNJ/ukLnnfVOkFyBDIKCdn0NAcqPE7FZu2aq/AbHN0obP8bBUUo1j3ocO2XzIAjl
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288472519663675826494570305573814929213678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 21:15:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 21:15:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tofuga.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27110873831640504013853599715696161459160014559045482118443468069442900047141511112584235157206691058994850394042765436727349470912913003733712603449653940359428709504788220041085863627805767974367155964917345286056515807933020776521449206109013766900464238496224197629180582005970167380430276665542177132821390030945943553790850284645633128334314428165785964970359902269842784863101360326617539756399013043962433980992263715298428793696429944997530070030616117794866141884990927800946342848648563018404367455252610826138551652725471723245242784706857975921949867867536636972232760818475897785351169623090907438441783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00435a726296d2018ec81d2f832e7a5680643c8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2032 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '805leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amoxicillina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asaxaterra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikeframesize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'causetravelmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chizled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coatmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtrecordsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutertogether.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drcrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'droneimaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drop-off.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dudetama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-of.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fakegig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genetics23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greensborosportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havit.exposed'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiismarijuana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippo-golf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informationists.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetsampling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpaintallahassee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judgingthejudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lg.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motherofone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriarealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offertehotelischia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oraesatta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownthehddvd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictureridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premeditate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectbelize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qarmy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisavingsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rottweilerlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shielded-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stdmatchmaker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellmontana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohns.college'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stressandstoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickbitefirstaidkit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickremoval.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tofuga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimmforhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatshoulditakepicturesof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.805leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amoxicillina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asaxaterra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankingintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bikeframesize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.causetravelmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chizled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coatmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courtrecordsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cutertogether.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drcrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.droneimaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drop-off.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dudetama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-of.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fakegig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genetics23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greensborosportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havit.exposed'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiismarijuana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hippo-golf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.informationists.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internetsampling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpaintallahassee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.judgingthejudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lg.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobileregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motherofone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nigeriarealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offertehotelischia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oraesatta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ownthehddvd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pictureridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premeditate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectbelize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qarmy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reisavingsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rottweilerlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shielded-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.showshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stdmatchmaker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellmontana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohns.college'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stressandstoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tickbitefirstaidkit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tickremoval.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tofuga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trimmforhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatshoulditakepicturesof.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a79e101200000403004730450221009e38be76f87be2d5fabe8edb0883d097745373c5dfc13161f59793c5a962346e0220381b0caa535680536e6ecb4d26feae5cb53cfa64dfb888f86214a6a98424977200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a79e1035000004030047304502200e66ddcf6b50ae7442d5646b797e967adca73fe8a1656d825fcc39fe98cddac2022100ed5c11fa8bb57bc9d9c0995562f15914b913d05361218388e3d6f76bd445c193
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009542432340cbfeacd66471c05ec81d6e1b1ff88855c2c4b8d49b6a57b53e2c3a76e72bd52ec5a664b6eca51f7e832af626bc404b2eb1de58ebebd106c63ea900cdb2aff8d65aff02a7bc10e0ec9b64eb8fe4ac10ea665a2303c58c1a047cd2a2a367830df3c46793a448508046ee295ec1b37bca44e7eb3a60d7dbbfdccfec5c3dfd21f6655109d4572dc390df283902c5f1c3b5e4428e2e0582694d26c9b76ee2dc1efb4edef51c2339c399e14a1de73116f5d7bb006b397dae8c1ce634ff3b487fda28a45df3a5019390684eab670781548b9b3ebd1ad7274072a5d091cbbefe555ecf9594c35af6316386a28bc4c6e5250171de88941467554c58095d2bea