www.aimanager.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ed:e6:fa:4d:56:30:b0:40:ab:d9:28:43:39:cb:87:87:65 was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.aimanager.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ed:e6:fa:4d:56:30:b0:40:ab:d9:28:43:39:cb:87:87:65
Serial Number (int): 429403086769122796599212916605505598097253
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 70:42:d3:19:20:7b:25:d3:60:3b:22:72:63:dd:e1:f9:a0:33:0e:4b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:0b:a5:33:79:d3:80:25:fd:eb:6d:7f:f9:4f:bb:42:ec:dd:14:2f
Fingerprint (sha256): 44:50:78:c1:6e:c6:c4:fc:9f:a1:58:77:53:f5:5b:5f:bf:f9:53:95:35:04:8f:98:b9:ba:44:a5:df:f3:4b:a4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.aimanager.ca

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aimanager.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1488.ninja
aimanager.ca
antifashion.club
appletree.la
asean.la
barbkops.ca
bonafirerecords.ca
bookitentertainment.ca
buyamerican.club
entreprisesduquebec.ca
futureflight.co.za
ggbs.asia
iiaserv.co.za
ijumpsa.co.za
leopard.pizza
marshallonline.mba
narlei.ca
plantbasedprotein.ca
private.moda
propholdings.co.za
raphaelle.ca
safecasino.co.za
theme.club
uscmarshall.mba
vapeto.ca
vision20.club
wodu.ca
wong.media
www.1488.ninja
www.aimanager.ca
www.antifashion.club
www.appletree.la
www.asean.la
www.barbkops.ca
www.bonafirerecords.ca
www.bookitentertainment.ca
www.buyamerican.club
www.entreprisesduquebec.ca
www.futureflight.co.za
www.ggbs.asia
www.iiaserv.co.za
www.ijumpsa.co.za
www.leopard.pizza
www.marshallonline.mba
www.narlei.ca
www.plantbasedprotein.ca
www.private.moda
www.propholdings.co.za
www.raphaelle.ca
www.safecasino.co.za
www.theme.club
www.uscmarshall.mba
www.vapeto.ca
www.vision20.club
www.wodu.ca
www.wong.media

Other certificates including the domain name aimanager.ca

(limited to 100 certificates)
usconline.mba
transfermatic.com
1488.ninja
siewmai.com
www.aimanager.ca
www.firewoodcourse.com
casajonquilles.com
propholdings.co.za
imprenditoriale.com
www.bonafirerecords.ca
aimanager.ca
www.lailaa.nl
www.xn--investeringsrdgivning-42b.com
www.aimanager.ca
terroristaction.com
www.hemppalms.com

Certificate

The complete raw certificate details for www.aimanager.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJJzCCCA+gAwIBAgISBO3m+k1WMLBAq9koQznLh4dlMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTYxNzI1NTJaFw0y
MDAxMTQxNzI1NTJaMBsxGTAXBgNVBAMTEHd3dy5haW1hbmFnZXIuY2EwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVsaNGba9ZhXQwWTgmrio63axPRt2D
7SlmL5kk9s3I58D1pWVob9NWPBb4HoNxE6ReiCNENXoFoLUDaNP9dB68ATaRrbGb
sPlSG8eCKsJ74fyWnCCHgEGHGdJPHEisP9HXbl8WPANjmEMOLiIXBT94+TQ4ULLl
XQ22/HKIC4MDfOKAUEUf0VLXvEZgbF97NUAjMN/KiX1zfEHKtNKFJcp5mMKhexmK
3zeV3eYcf9lcZ3Uv1u2kSIQhAoQUtWkS7T4B0OKGDq5/mWr58JKZx6XUYiFE5rRy
fFOpPmk+mAaTv5sAY3B90EsrQaLUUtt2JxvVDmBlwcvLFC3TCWQwMYIRAgMBAAGj
ggY0MIIGMDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHBC0xkgeyXTYDsicmPd4fmg
Mw5LMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wggPpBgNVHREEggPgMIID3IIKMTQ4OC5uaW5qYYIMYWltYW5hZ2VyLmNh
ghBhbnRpZmFzaGlvbi5jbHViggxhcHBsZXRyZWUubGGCCGFzZWFuLmxhggtiYXJi
a29wcy5jYYISYm9uYWZpcmVyZWNvcmRzLmNhghZib29raXRlbnRlcnRhaW5tZW50
LmNhghBidXlhbWVyaWNhbi5jbHVighZlbnRyZXByaXNlc2R1cXVlYmVjLmNhghJm
dXR1cmVmbGlnaHQuY28uemGCCWdnYnMuYXNpYYINaWlhc2Vydi5jby56YYINaWp1
bXBzYS5jby56YYINbGVvcGFyZC5waXp6YYISbWFyc2hhbGxvbmxpbmUubWJhgglu
YXJsZWkuY2GCFHBsYW50YmFzZWRwcm90ZWluLmNhggxwcml2YXRlLm1vZGGCEnBy
b3Bob2xkaW5ncy5jby56YYIMcmFwaGFlbGxlLmNhghBzYWZlY2FzaW5vLmNvLnph
ggp0aGVtZS5jbHVigg91c2NtYXJzaGFsbC5tYmGCCXZhcGV0by5jYYINdmlzaW9u
MjAuY2x1YoIHd29kdS5jYYIKd29uZy5tZWRpYYIOd3d3LjE0ODgubmluamGCEHd3
dy5haW1hbmFnZXIuY2GCFHd3dy5hbnRpZmFzaGlvbi5jbHVighB3d3cuYXBwbGV0
cmVlLmxhggx3d3cuYXNlYW4ubGGCD3d3dy5iYXJia29wcy5jYYIWd3d3LmJvbmFm
aXJlcmVjb3Jkcy5jYYIad3d3LmJvb2tpdGVudGVydGFpbm1lbnQuY2GCFHd3dy5i
dXlhbWVyaWNhbi5jbHVighp3d3cuZW50cmVwcmlzZXNkdXF1ZWJlYy5jYYIWd3d3
LmZ1dHVyZWZsaWdodC5jby56YYINd3d3LmdnYnMuYXNpYYIRd3d3LmlpYXNlcnYu
Y28uemGCEXd3dy5panVtcHNhLmNvLnphghF3d3cubGVvcGFyZC5waXp6YYIWd3d3
Lm1hcnNoYWxsb25saW5lLm1iYYINd3d3Lm5hcmxlaS5jYYIYd3d3LnBsYW50YmFz
ZWRwcm90ZWluLmNhghB3d3cucHJpdmF0ZS5tb2RhghZ3d3cucHJvcGhvbGRpbmdz
LmNvLnphghB3d3cucmFwaGFlbGxlLmNhghR3d3cuc2FmZWNhc2luby5jby56YYIO
d3d3LnRoZW1lLmNsdWKCE3d3dy51c2NtYXJzaGFsbC5tYmGCDXd3dy52YXBldG8u
Y2GCEXd3dy52aXNpb24yMC5jbHViggt3d3cud29kdS5jYYIOd3d3LndvbmcubWVk
aWEwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQC
BIH0BIHxAO8AdQBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW3V
0bBIAAAEAwBGMEQCIHiyAGyLVYfluC76IaH9c72q4ZZxsu2FixLsKcE6/KHGAiAE
TeJq0J7pTL9cVJyPdxL9PvEAN9mR41Kavtn43YMQOwB2ACk8UZZUyDlluqpQ/FgH
1Ldvv1h6KXLcpMMM9OVFR/R4AAABbdXRsDkAAAQDAEcwRQIhAJBrVR3ijCYKVyqQ
5H6KeriLhGhcU34dKdIo6WDRCU0oAiAVusSSwTCkgKtAMqwSmh0kOJJdWJ2SyoM0
IvMB7bhkGjANBgkqhkiG9w0BAQsFAAOCAQEAMrsGlrL0hD2kaQeZr2AQhhAw42CV
u6iO4+Az+5zxwK1csHJ8VtINVS/Uh813jNqmkAZ9k02jw2Mvxo9myNIkVj8pHKEL
ZmrlVZySBINoBLlIj7dV6+LeB7YSVQf17kBqAcYz4XHw7N4suPBn6Nsxmz4ovedm
XM7ZXXrk88i7A9cjg2xUvgPmeyE1QliYiOFbEtFZ7GAtHTh6wX2Gotl2ss00keov
pg81FPKje6h33QfWOSBlsJpsiFRy7Ks1af/nejQf77lJP/jhzjpfwi2M///XkcX0
XaxAl1ww5JAkJ79B3A9IWZHzttOefPpXigNO0XQzRDXjYYIlFsOrUDtAHA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbGjRm2vWYV0MFk4Jq4q
Ot2sT0bdg+0pZi+ZJPbNyOfA9aVlaG/TVjwW+B6DcROkXogjRDV6BaC1A2jT/XQe
vAE2ka2xm7D5UhvHgirCe+H8lpwgh4BBhxnSTxxIrD/R125fFjwDY5hDDi4iFwU/
ePk0OFCy5V0NtvxyiAuDA3zigFBFH9FS17xGYGxfezVAIzDfyol9c3xByrTShSXK
eZjCoXsZit83ld3mHH/ZXGd1L9btpEiEIQKEFLVpEu0+AdDihg6uf5lq+fCSmcel
1GIhROa0cnxTqT5pPpgGk7+bAGNwfdBLK0Gi1FLbdicb1Q5gZcHLyxQt0wlkMDGC
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429403086769122796599212916605505598097253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 17:25:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 17:25:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aimanager.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18897103900634537529755006806404410745296746471499461936519206707773413945738242569341327179152353629764569036445585676074366643942415332591673028978047033224673207089272151285436456784390454582394151043564390948107237006478104456924933080934460055345376268837705608380270992951915017281054882448192757003733280590714191296099289197258510903287963887404094371384332223147116761226084389715735128256190501705986206490458298539571716748327120122379537969166303284030434759018928769295713640438822644128634294683384273535923033594333280671018321474883217923105458139091790252948644300705221168924558007511309202605834769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7042d319207b25d3603b227263dde1f9a0330e4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (992 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1488.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimanager.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antifashion.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appletree.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asean.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbkops.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonafirerecords.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookitentertainment.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyamerican.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprisesduquebec.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futureflight.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggbs.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iiaserv.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijumpsa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leopard.pizza'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshallonline.mba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narlei.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantbasedprotein.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.moda'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propholdings.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raphaelle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safecasino.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscmarshall.mba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vapeto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vision20.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wodu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wong.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1488.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimanager.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antifashion.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appletree.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asean.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbkops.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonafirerecords.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookitentertainment.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyamerican.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.entreprisesduquebec.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futureflight.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggbs.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iiaserv.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ijumpsa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leopard.pizza'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marshallonline.mba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.narlei.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantbasedprotein.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.private.moda'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propholdings.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raphaelle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safecasino.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theme.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uscmarshall.mba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vapeto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vision20.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wodu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wong.media'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dd5d1b0480000040300463044022078b2006c8b5587e5b82efa21a1fd73bdaae19671b2ed858b12ec29c13afca1c60220044de26ad09ee94cbf5c549c8f7712fd3ef10037d991e3529abed9f8dd83103b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dd5d1b0390000040300473045022100906b551de28c260a572a90e47e8a7ab88b84685c537e1d29d228e960d1094d28022015bac492c130a480ab4032ac129a1d2438925d589d92ca833422f301edb8641a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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