investrig.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:af:fd:49:cf:c7:46:66:1f:47:03:b8:d5:18:50:2b:14:22 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=investrig.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:fd:49:cf:c7:46:66:1f:47:03:b8:d5:18:50:2b:14:22
Serial Number (int): 321222949941296207509282624502493809939490
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:a8:db:58:db:6d:7f:aa:1d:91:5a:db:4f:ad:48:7c:82:12:a2:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:e9:73:2b:74:49:22:f5:41:58:33:9d:a1:df:49:91:97:16:18:fe
Fingerprint (sha256): 45:54:85:17:8e:a1:5b:63:79:ad:3e:5f:c3:ea:52:2b:8e:aa:c5:4d:d4:b7:d1:c6:98:8d:ee:22:3e:66:5b:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate investrig.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for investrig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

100geburtstag.com
agustipuig.com
anotherfalseflag.com
asteriskconfig.com
asterisktag.com
bogusflag.com
brovig.com
coldpressedveg.com
creedblackflag.com
dersonntag.com
dubaimoney.net
durschlag.com
employmentdg.com
fixleg.com
globalrig.com
gravityandswag.com
investrig.com
jackdurschlag.com
juicingveg.com
literarymag.com
madisonatballstonstationag.com
madisonballstonstationag.com
martonschimcsig.com
morefalseflag.com
newfalseflag.com
privatebankingag.com
radiowinnipeg.com
realsexdrag.com
schimcsig.com
scubasportmag.com
semisubmersibleoilrig.com
semisubmersiblerig.com
thatfalseflag.com
timesbg.com
tourwinnipeg.com
trygg.com
unitedarabemiratesflag.com
untrueflag.com
varig.com
wnhashtag.com
www.100geburtstag.com
www.agustipuig.com
www.anotherfalseflag.com
www.asteriskconfig.com
www.asterisktag.com
www.bogusflag.com
www.brovig.com
www.coldpressedveg.com
www.creedblackflag.com
www.dersonntag.com
www.dubaimoney.net
www.durschlag.com
www.employmentdg.com
www.fixleg.com
www.globalrig.com
www.gravityandswag.com
www.investrig.com
www.jackdurschlag.com
www.juicingveg.com
www.literarymag.com
www.madisonatballstonstationag.com
www.madisonballstonstationag.com
www.martonschimcsig.com
www.morefalseflag.com
www.newfalseflag.com
www.privatebankingag.com
www.radiowinnipeg.com
www.realsexdrag.com
www.schimcsig.com
www.scubasportmag.com
www.semisubmersibleoilrig.com
www.semisubmersiblerig.com
www.thatfalseflag.com
www.timesbg.com
www.tourwinnipeg.com
www.trygg.com
www.unitedarabemiratesflag.com
www.untrueflag.com
www.varig.com
www.wnhashtag.com

Other certificates including the domain name investrig.com

(limited to 100 certificates)
schimcsig.com
investrig.com
www.dressag.com
www.trygg.com
teaminternetag.com
www.dubaimoney.net
www.unitedarabemiratesflag.com
dersonntag.com
www.literarymag.com
privatebankingag.com
literarymag.com
teaminternetag.com
investrig.com
www.scubasportmag.com
www.defencegradesecurity.com
www.trygg.com
www.dubaimoney.net
investrig.com
dersonntag.com
fixleg.com
www.martonschimcsig.com
www.dersonntag.com
www.defencegradesecurity.org
saudistockxchange.com
saudistockxchange.com
www.literarymag.com
teaminternetag.com
brovig.com
www.shoporganicveg.com
www.creedblackflag.com
www.defensegrade.com
jackdurschlag.com
madisonballstonstationag.com
scubasportmag.com
asteriskconfig.com
www.defencegradesecurity.com
fixleg.com
www.defencegradesecurity.com
www.saudipower.org
teaminternetag.com
dersonntag.com
www.asteriskconfig.com
teaminternetag.com
www.trygg.com
saudistockxchange.com
www.timesbg.com
fixleg.com

Certificate

The complete raw certificate details for investrig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHZ7WcxILi2B5DBXLVyV
2APWefBZQOyE3naXOGARPe8Ub5k5oalPUMFxLmye/KI80v0w5U5wvMk/sweyNSph
2T9VAU/lE7mDAVX4Y6M14G5OcxkSzvEoftG7EL4UF3dWGhuMJuoZeH0y9MzRHkrn
7ijW8qywzeIWcMIZWqsv/0ix4NWOZDiULrgXLWALhlSeUA3VG0W8JOuXXiwsFW03
4/ux4SSIgpOWyZQcM3/hQfc1+u/T6LAwEDM+UVhI5ygH7ODZgrArDXyHuKGjoPy1
UriVoRf37NZP5bgeAvwHRxR25sC9p9NoF+3EzDKHdHNkVZkVPdnmyfZ7tXwczDlr
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321222949941296207509282624502493809939490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-02 10:53:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-01 10:53:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'investrig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25811039785417237878128932224351212228356523169150554012967534355068531976744430510320086037426045936173503445656321101611615705608397580257699614118659118513633085123307648152657315368482334095285198411577817056197789528106412641686483718699556910876128105486997187507734519847749890733946263252932639889192916647422095762959981745064066543211654132779212367052335751693240430503407801252786592030332058323699765892071394976418922376809555503538890346471900150698341587962152586313102583921714510420756740095759229723140162706943225918073960201964293059562086303755132894681242676996440931332930677257756027796417409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90a8db58db6d7faa1d915adb4fad487c8212a21d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1632 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100geburtstag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agustipuig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anotherfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asteriskconfig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asterisktag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bogusflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brovig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coldpressedveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creedblackflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dersonntag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaimoney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employmentdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravityandswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackdurschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicingveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literarymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonatballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martonschimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morefalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankingag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiowinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realsexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scubasportmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semisubmersibleoilrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semisubmersiblerig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tourwinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trygg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedarabemiratesflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untrueflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnhashtag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.100geburtstag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agustipuig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anotherfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asteriskconfig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asterisktag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bogusflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brovig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coldpressedveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creedblackflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dersonntag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaimoney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employmentdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gravityandswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackdurschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juicingveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literarymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonatballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martonschimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morefalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankingag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiowinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realsexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scubasportmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semisubmersibleoilrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semisubmersiblerig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thatfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tourwinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trygg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedarabemiratesflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.untrueflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wnhashtag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001659a218bfe000004030047304502210081fe409070e9e7c74b207f5948b3658af4ba4b58cb42bc7c8e72292a49d5a599022020903cb183104af8e998d9413167e5d43aeaea5d25f7ccaa399c793819fc9ce8007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001659a218e29000004030046304402201a7a0b915502a0aacda43337245b481240fb95134def45f0c79b10f4d3d7bd2202206fead37e9296926794e4e726632b79390c4eba0e540476331b31ea23f9a8ccf0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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