*.boardgamers.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:46:6b:1a:d5:3d:00:d8:87:40:5e:55:67:49:fd:61:aa:39 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.boardgamers.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:46:6b:1a:d5:3d:00:d8:87:40:5e:55:67:49:fd:61:aa:39
Serial Number (int): 372411276131760412190710695593481003444793
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 11:46:78:56:5e:48:08:e0:9c:4a:65:37:b2:5b:24:8d:68:05:5c:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:39:15:9a:2f:bf:d4:d4:7c:34:a3:5e:89:0b:1b:ea:91:e3:ac:04
Fingerprint (sha256): 3b:17:b9:98:32:d0:73:fc:9a:e7:79:1c:57:e8:3c:a2:77:1f:54:3d:30:fa:15:58:e5:90:6f:58:69:bd:a5:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.boardgamers.org

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.boardgamers.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adsoink.com
*.boardgamers.org
*.christopherjames-studio.com
*.coffee-room.com
*.deborahgibbon.com
*.dekko2.com
*.eduwonk.org
*.ericwelsh.com
*.gowithin.net
*.hoida.net
*.hotdishcooking.biz
*.hotdishcooking.com
*.hotdishcooking.net
*.iheartboris.com
*.insulquilt.net
*.jamesnoelsmith.com
*.jdbconstruct.com
*.joelpress.com
*.lindaching.com
*.meanredmusic.com
*.mehndimama.com
*.mpress.org
*.myhometeamsports.com
*.nathanfitch.com
*.newbornscreening.info
*.njeneer.com
*.oursonbilly.com
*.parliamentproductions.com
*.patrickcrowson.com
*.paulmerino.com
*.philipjuras.com
*.potionsmadebychildren.com
*.prodel.net
*.ravya.com
*.redbandutica.com
*.samuelg.com
*.sekarmd.com
*.southwestinterfaith.org
*.thallenbeck.com
*.theartopia.com
*.thelinkfamily.net
*.thoughtclearing.com
*.twiglet.com
*.veatchconnors.net
adsoink.com
boardgamers.org
christopherjames-studio.com
coffee-room.com
deborahgibbon.com
dekko2.com
eduwonk.org
ericwelsh.com
gowithin.net
hoida.net
hotdishcooking.biz
hotdishcooking.com
hotdishcooking.net
iheartboris.com
insulquilt.net
jamesnoelsmith.com
jdbconstruct.com
joelpress.com
lindaching.com
meanredmusic.com
mehndimama.com
mpress.org
myhometeamsports.com
nathanfitch.com
newbornscreening.info
njeneer.com
oursonbilly.com
parliamentproductions.com
patrickcrowson.com
paulmerino.com
philipjuras.com
potionsmadebychildren.com
prodel.net
ravya.com
redbandutica.com
samuelg.com
sekarmd.com
southwestinterfaith.org
thallenbeck.com
theartopia.com
thelinkfamily.net
thoughtclearing.com
twiglet.com
veatchconnors.net

Other certificates including the domain name boardgamers.org

(limited to 100 certificates)
*.culturemaven.com
lists.0100101110101101.org
*.jugglingklines.com
customers.tigertech.net
*.jugglingklines.com
customers.tigertech.net
lists.0100101110101101.org
lists.bigteezesalon.com
web04.tigertechnologies.us
customers.tigertech.net
*.upn1541.com
web04.tigertechnologies.us
lists.brazosvalleyco-op.com
customers.tigertech.net
customers.tigertech.net
*.boardgamers.org
lists.0100101110101101.org
lists.0100101110101101.org
lists.swimkingpools.com
lists.0100101110101101.org
customers.tigertech.net
*.culturemaven.com
web04.tigertechnologies.us
lists.bigteezesalon.com
lists.mawturners.com
*.boardgamers.org
customers.tigertech.net
*.landsake.net
lists.upsstorage.com
web04.tigertechnologies.us
web04.tigertechnologies.us
lists.0100101110101101.org
*.landsake.net
*.landsake.net
*.landsake.net
lists.0100101110101101.org
lists.familyfitnessandfreedom.com
lists.chanders.com
customers.tigertech.net
customers.tigertech.net
lists.celiet.com
customers.tigertech.net
*.culturemaven.com
web04.tigertechnologies.us
*.culturemaven.com
lists.rasterms.com
lists.0100101110101101.org
lists.autumncovenantleather.com
lists.iafflocal5031.org
web04.tigertechnologies.us
lists.0100101110101101.org
*.tedberg.com
lists.0100101110101101.org
*.landsake.net
*.jugglingklines.com

Certificate

The complete raw certificate details for *.boardgamers.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSYjqoCBEqGinSj5kwJR
Yho55iG2WeIx9LcHEohrYXKF63AdXEmJXVyCfDJFdB0O2MlnVYGYaZyIx4b4OcTg
Py/R+7cMD7MZr/6D+Tat8xFXWIG2JoqSqOj/CI5Vtkm5JD12FAf7Vp53DTbmlmYi
Ygyi3d+iCCldTYXOj+g4ysuidJD/D8TzCvf9jx1/JJPDCVWuclU5+fM0XnXOnkmP
DRRoUmDN+9Z7V9EabfqsAHx4q7LrZhz78nNAmNDl67v0PsK2FSXR8IO8/WRMpB26
VNGUHPlAOLUuLDM3kzF0zthbBbDzEeloTYUMscKZbXGyPcQeIREiiVC3iNYOEhec
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372411276131760412190710695593481003444793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 06:52:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-17 06:52:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.boardgamers.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23877846838430025975287752822475856223324941174767269801073143788063290839689464849423874922282887369491013622956530860464489718201629112412362885893377431693081080422192604034069214005302513791080315534316371181971299496865864520170984605797273031202500446776473775449030825216690123119625122003044529401585680649799185568076617017851636605022967681702942568638969254602043572094183163101163207098454046537931512688219845441261876485127638064805782547184886395822393324088858623099938893345177065400728232595248922932700423308126635448453631409723422260367036620278466591264478285000438320708698432758440328391269381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							114678565e4808e09c4a6537b25b248d68055c71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1620 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adsoink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boardgamers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christopherjames-studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coffee-room.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deborahgibbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dekko2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eduwonk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ericwelsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gowithin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoida.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotdishcooking.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotdishcooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotdishcooking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iheartboris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insulquilt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jamesnoelsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jdbconstruct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joelpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lindaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meanredmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mehndimama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mpress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhometeamsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nathanfitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newbornscreening.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njeneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oursonbilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parliamentproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patrickcrowson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paulmerino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.philipjuras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potionsmadebychildren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prodel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ravya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redbandutica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samuelg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sekarmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southwestinterfaith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thallenbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theartopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelinkfamily.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thoughtclearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twiglet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veatchconnors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsoink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardgamers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christopherjames-studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffee-room.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deborahgibbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekko2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduwonk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ericwelsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gowithin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoida.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotdishcooking.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotdishcooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotdishcooking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iheartboris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insulquilt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesnoelsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdbconstruct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joelpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meanredmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mehndimama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhometeamsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nathanfitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbornscreening.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njeneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oursonbilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parliamentproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrickcrowson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulmerino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philipjuras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potionsmadebychildren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbandutica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samuelg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sekarmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwestinterfaith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thallenbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelinkfamily.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoughtclearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twiglet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veatchconnors.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ca8dcb268000004030046304402205dee75706a7512e5eefd38f8df8cc695123820da2ac7d6ce6f8221d17698852a02201640647981f5e24c1769fc8c87a1eb972f0ba35b6fb76b7a6efc7e5401bc5ebd007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ca8dcb25a0000040300473045022100d34783a8ad6c092e5cc6ca8e82ba6a0818c70d36b90bee514237c8e7a87c50bf022049376984ee17acbf7948f5387e7e5c95e8551a40a15c2968317c4df1be4f55d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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