*.africaforafricans.org

Issued by R3

About this certificate

This digital certificate with serial number 03:80:2a:27:06:68:89:f7:1a:cf:65:17:38:5d:62:63:d5:69 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.africaforafricans.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:2a:27:06:68:89:f7:1a:cf:65:17:38:5d:62:63:d5:69
Serial Number (int): 304949030966538197289146892516751139132777
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:04:dd:5d:05:a8:9e:69:56:14:95:1a:77:0f:39:e5:13:6a:16:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:19:bd:ba:72:b3:25:17:2e:20:f0:9f:99:ad:92:e5:3b:c0:61:10
Fingerprint (sha256): 41:4a:0f:6c:e9:4b:d4:a0:10:47:40:b7:9a:ef:df:58:c7:f1:0e:a1:76:54:8f:ed:62:67:d9:2d:aa:c5:6c:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.africaforafricans.org

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.africaforafricans.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.africaforafricans.org
*.akashicrecording.com
*.arizonaplaywriting.org
*.boylejudge.com
*.campaignforequaljustice.org
*.cardel-criste.com
*.caribbeancitrusco.com
*.chelanvalleycommunitynurse.org
*.chicplaysportswear.com
*.dmcohen.com
*.downtoearthlandscapingny.com
*.eldritchmillennial.com
*.elizabetharend.com
*.energietech.org
*.greenmangographics.com
*.hiramsrangers.org
*.hybridcreations.net
*.iajgs2015.org
*.iajgs2024.org
*.jeanniewarner.com
*.jesus-rockers.com
*.kathyburwell.com
*.lookyoufoundit.com
*.marfbm.ae
*.markethall.info
*.netwinning.net
*.newpartybiz.com
*.patriciapetelin.com
*.peterjcolosi.com
*.positivepathsaz.org
*.sheetmusiccovers.org
*.shefindswonderfulthings.com
*.shemakeswonderfulthings.com
*.smoothtransitionsofnww.com
*.storyharborenterprises.com
*.storyharborentertainment.com
*.theworkshoppeeast.com
*.unitedexteriors.com
*.writersdrinkingcoffee.com
*.yellowjacketrevolution.com
*.yellowjacketrevolution.org
*.zo-unique.com
africaforafricans.org
akashicrecording.com
arizonaplaywriting.org
boylejudge.com
campaignforequaljustice.org
cardel-criste.com
caribbeancitrusco.com
chelanvalleycommunitynurse.org
chicplaysportswear.com
customers.tigertech.net
dmcohen.com
downtoearthlandscapingny.com
eldritchmillennial.com
elizabetharend.com
energietech.org
greenmangographics.com
hiramsrangers.org
hybridcreations.net
iajgs2015.org
iajgs2024.org
jeanniewarner.com
jesus-rockers.com
kathyburwell.com
lookyoufoundit.com
marfbm.ae
markethall.info
netwinning.net
newpartybiz.com
patriciapetelin.com
peterjcolosi.com
positivepathsaz.org
sheetmusiccovers.org
shefindswonderfulthings.com
shemakeswonderfulthings.com
smoothtransitionsofnww.com
storyharborenterprises.com
storyharborentertainment.com
theworkshoppeeast.com
unitedexteriors.com
writersdrinkingcoffee.com
yellowjacketrevolution.com
yellowjacketrevolution.org
zo-unique.com

Other certificates including the domain name africaforafricans.org

(limited to 100 certificates)
customers.tigertech.net
customers.tigertech.net
*.africaforafricans.org
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net

Certificate

The complete raw certificate details for *.africaforafricans.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbUZID2tiF2SGnvHNJF1
NjuMZlTlO1P065z4XuVlPoKT8lvxqSfZMyyYAn0B768y50QhMBeYdIup/JUfjRZS
3Ddfokq2Hl3oC/FFmXpSxm/pDPnQJk95IvXJziGqam9NpuVrXoRR1g09c0Ts8EO7
qmqD/P5HqZJdqcoImDBYBAAFdtyOiJS/Eaa5DZXzG2YgBMXsM85Zze9vDsqSrlBN
eJw+O2lxPknea3cYt9nI8oFtl+8Xp3NN+lPPKWnQXPKl1ZSC6YYvXcr1z4bj9vgS
2i3yIA6gvECkVuoXtmpWmY3IN3YxeJ3NDiMycgLL2oWxkNV0El1Ymiy5p3g/PF7E
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304949030966538197289146892516751139132777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-27 08:21:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-25 08:21:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.africaforafricans.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22433482804235389991372466963032475268422776637501221706805808108443276405408086437007123520790351795026189291767800519952191080351077113062946575016952581007871834121250379986628030630601404241394487980401038766242137969403421884610258149199476502122119391511766373396475652704821989943909217521435231363471416277095685826482988715268061549264213687752663693291406993137602363932318579986407878519464750335084686306942068133317589642996889718218919880973140952023382351499833769059461446082139745390977799394744787732344562886686192277935009501418437943815561782055176733895829969045224011228570384774865594454295787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e104dd5d05a89e695614951a770f39e5136a16e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1943 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.africaforafricans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akashicrecording.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arizonaplaywriting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boylejudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campaignforequaljustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardel-criste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caribbeancitrusco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chelanvalleycommunitynurse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicplaysportswear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmcohen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downtoearthlandscapingny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eldritchmillennial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elizabetharend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.energietech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenmangographics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiramsrangers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hybridcreations.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iajgs2015.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iajgs2024.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeanniewarner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jesus-rockers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathyburwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lookyoufoundit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marfbm.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markethall.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netwinning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newpartybiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patriciapetelin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peterjcolosi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.positivepathsaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheetmusiccovers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shefindswonderfulthings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shemakeswonderfulthings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smoothtransitionsofnww.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storyharborenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storyharborentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theworkshoppeeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitedexteriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.writersdrinkingcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yellowjacketrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yellowjacketrevolution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zo-unique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africaforafricans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akashicrecording.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arizonaplaywriting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boylejudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaignforequaljustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardel-criste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caribbeancitrusco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chelanvalleycommunitynurse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicplaysportswear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.tigertech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmcohen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downtoearthlandscapingny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eldritchmillennial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elizabetharend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energietech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenmangographics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiramsrangers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybridcreations.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iajgs2015.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iajgs2024.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeanniewarner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesus-rockers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathyburwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lookyoufoundit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marfbm.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markethall.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netwinning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newpartybiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriciapetelin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterjcolosi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'positivepathsaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheetmusiccovers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shefindswonderfulthings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shemakeswonderfulthings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smoothtransitionsofnww.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storyharborenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storyharborentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theworkshoppeeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedexteriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writersdrinkingcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yellowjacketrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yellowjacketrevolution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zo-unique.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187225f095e0000040300483046022100890d31a52cb16966aed37cbbe5cd111e7af6b7252c3b1bbdc9c74fd1429c08990221009f1f81af79604aa8d8512a05a78ccdaf992f684cbb8efad5742dc5293693c580007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187225f09560000040300483046022100c9f6fa6b719915d6fab603d06fee8cfb9b0693549ce1d1e93894b485187124bc022100ebef8ec8f47d8c86ca212df0632f125e00b760f0008c20ce8015fff26cd23dd8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00373891deefebb781d159b2eb1ca57d681df4f726f1f742a885df091d7a9c717f58d1493983ad826b8599c9fe07f94e6ce47db7788c9aaa14b09a6e627f3bd86a352dc5c36d8b55d1dee8fba24e64d33df57d0f1c014d82159ecb6432ee6122a9bc11c9f8bd35d5e1667f7211538eb5b5e9888fdadcf8d7c45e9bbb73c6b2aa818e775b3ab1e40c89ab5d40608d378d9af466e0ad48ff3c87971cfe54d45b22918c473f6d8d619bc89ed0a44a543a6eedc4d39afef1b0fd0f20a413c7ad4354b3f20f3d3ced1229be26584de019a2b203a4d9626efa583407d82d7633650c200fc00ffe124cba455a2472cca544b699d16a5e82db473de0c661f5890f699c3dee