*.jankrist.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:b3:2b:ee:54:cd:2e:55:cb:ea:bd:47:85:92:ab:a7:ff was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.jankrist.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:b3:2b:ee:54:cd:2e:55:cb:ea:bd:47:85:92:ab:a7:ff
Serial Number (int): 312957655114285016624738670619558811510783
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:04:dd:5d:05:a8:9e:69:56:14:95:1a:77:0f:39:e5:13:6a:16:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:44:43:d4:e6:f7:ba:5a:6d:ff:a1:66:ae:9c:a6:66:fc:2e:d4:5b
Fingerprint (sha256): 3b:f3:ab:f0:c5:16:ad:5e:2e:8c:1f:30:05:e9:db:08:57:2a:8d:91:e9:fd:a4:f8:f5:2c:a6:e0:ed:6a:13:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.jankrist.net

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.jankrist.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.46sportandfitness.com
*.acholisticwellness.com
*.adellesabatier.com
*.alittlebitoflip.com
*.americaswarriorsbooks.com
*.atxtrainer.com
*.blackstonedentist.com
*.bljcreativestudios.com
*.brokenworldbooks.com
*.chimfunshiusa.org
*.clovermeadowstudio.com
*.craigandchris.org
*.davidandmercedesrizzo.com
*.eaglecommsolutions.com
*.flowermaven.net
*.foxcroftwine.com
*.greenfacelabs.com
*.illuminationweekend.org
*.imabiz.com
*.jankrist.net
*.kd4bee.net
*.lxcsystems.com
*.manoverbored.biz
*.marketinglandmines.com
*.mindfinderstudios.com
*.myselahgroup.com
*.oaklandish.com
*.oaklandish.org
*.pajarocompass.org
*.paradigm-ai.com
*.petanquelafayette.org
*.shadeschoice.com
*.stateofenchantment.com
*.terminalmanband.com
*.thefriendshipprojectbook.com
*.wordcrisper.com
*.yourbullyingtacticis.com
*.yourbullyingtacticis.org
46sportandfitness.com
acholisticwellness.com
adellesabatier.com
alittlebitoflip.com
americaswarriorsbooks.com
atxtrainer.com
blackstonedentist.com
bljcreativestudios.com
brokenworldbooks.com
chimfunshiusa.org
clovermeadowstudio.com
craigandchris.org
davidandmercedesrizzo.com
eaglecommsolutions.com
flowermaven.net
foxcroftwine.com
greenfacelabs.com
illuminationweekend.org
imabiz.com
jankrist.net
kd4bee.net
lxcsystems.com
manoverbored.biz
marketinglandmines.com
mindfinderstudios.com
myselahgroup.com
oaklandish.com
oaklandish.org
pajarocompass.org
paradigm-ai.com
petanquelafayette.org
shadeschoice.com
stateofenchantment.com
terminalmanband.com
thefriendshipprojectbook.com
wordcrisper.com
yourbullyingtacticis.com
yourbullyingtacticis.org

Other certificates including the domain name jankrist.net

(limited to 100 certificates)
*.christianmovement.club
*.institutomexicanodelapareja.edu.mx
*.mailboxes4u.co.uk
*.akingstonbedandbreakfast.com
customers.tigertech.net
*.jankrist.net
*.jankrist.net
customers.tigertech.net
customers.tigertech.net
*.invitationaleducation.org
*.ledfishinglight.cn
customers.tigertech.net
customers.tigertech.net
*.centralcleaners.co.uk
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net

Certificate

The complete raw certificate details for *.jankrist.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbUZID2tiF2SGnvHNJF1
NjuMZlTlO1P065z4XuVlPoKT8lvxqSfZMyyYAn0B768y50QhMBeYdIup/JUfjRZS
3Ddfokq2Hl3oC/FFmXpSxm/pDPnQJk95IvXJziGqam9NpuVrXoRR1g09c0Ts8EO7
qmqD/P5HqZJdqcoImDBYBAAFdtyOiJS/Eaa5DZXzG2YgBMXsM85Zze9vDsqSrlBN
eJw+O2lxPknea3cYt9nI8oFtl+8Xp3NN+lPPKWnQXPKl1ZSC6YYvXcr1z4bj9vgS
2i3yIA6gvECkVuoXtmpWmY3IN3YxeJ3NDiMycgLL2oWxkNV0El1Ymiy5p3g/PF7E
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312957655114285016624738670619558811510783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 09:24:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 09:24:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.jankrist.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22433482804235389991372466963032475268422776637501221706805808108443276405408086437007123520790351795026189291767800519952191080351077113062946575016952581007871834121250379986628030630601404241394487980401038766242137969403421884610258149199476502122119391511766373396475652704821989943909217521435231363471416277095685826482988715268061549264213687752663693291406993137602363932318579986407878519464750335084686306942068133317589642996889718218919880973140952023382351499833769059461446082139745390977799394744787732344562886686192277935009501418437943815561782055176733895829969045224011228570384774865594454295787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e104dd5d05a89e695614951a770f39e5136a16e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1644 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.46sportandfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acholisticwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adellesabatier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alittlebitoflip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americaswarriorsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atxtrainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackstonedentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bljcreativestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brokenworldbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chimfunshiusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clovermeadowstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craigandchris.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davidandmercedesrizzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eaglecommsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowermaven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxcroftwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenfacelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.illuminationweekend.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imabiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jankrist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kd4bee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lxcsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manoverbored.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketinglandmines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindfinderstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myselahgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oaklandish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oaklandish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pajarocompass.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paradigm-ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petanquelafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shadeschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stateofenchantment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terminalmanband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefriendshipprojectbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wordcrisper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourbullyingtacticis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourbullyingtacticis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '46sportandfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acholisticwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adellesabatier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alittlebitoflip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americaswarriorsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atxtrainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackstonedentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bljcreativestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokenworldbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chimfunshiusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clovermeadowstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craigandchris.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidandmercedesrizzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglecommsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowermaven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxcroftwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfacelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illuminationweekend.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imabiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jankrist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kd4bee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lxcsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manoverbored.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketinglandmines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindfinderstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myselahgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaklandish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaklandish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pajarocompass.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradigm-ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petanquelafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shadeschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stateofenchantment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terminalmanband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefriendshipprojectbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordcrisper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourbullyingtacticis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourbullyingtacticis.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001704d876e830000040300483046022100a5bb8b22f5b393e71132b023d77a816604dc12b26125a67eb778b56f73286071022100ef809e41e8eed0e260ea27222e9839b726f7f968d7409043139a292f0f9fb950007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704d876e7d0000040300473045022037923dcd41b666b1c7e7d399ea449b1612fd02b4b9359e407bbb21409f7fba5f022100bf2303c76b988b92ef64490dad16cdf3021294e6c4df141e657e5d4fda9877db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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