*.natividadfermin.com

Issued by R3

About this certificate

This digital certificate with serial number 03:1f:dd:31:e2:92:74:6e:8f:96:25:9e:bd:4f:1e:c1:71:8d was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.natividadfermin.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1f:dd:31:e2:92:74:6e:8f:96:25:9e:bd:4f:1e:c1:71:8d
Serial Number (int): 272179629574872282995109522904131326538125
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:76:9e:ce:c8:e0:2e:97:de:fe:9f:23:dc:7f:e7:a8:b9:c6:2b:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f9:d2:a6:84:de:74:b6:3d:19:c2:58:2a:b7:4d:cb:4b:80:ab:11:15
Fingerprint (sha256): 45:69:17:f4:41:df:8c:47:0e:47:bf:94:c2:7b:23:34:21:65:5d:28:fa:aa:d2:64:18:f8:34:83:c5:9b:bb:d5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.natividadfermin.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.natividadfermin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.70yearsofhope.com
*.alexcortani.com
*.artinvocabulary.com
*.bampta.org
*.bestdoctorssydney1.com
*.bestsydneyurologists.net
*.brookfieldfarm.com
*.carbonfriendly.org
*.chaire-data-scientist.fr
*.cohousingresearchnetwork.org
*.countryriverhomes.com
*.creativewoodfloors.net
*.crisprahead.org
*.dappleandgray.com
*.dualsdemoadvocacy.org
*.earthwindfireyoga.com
*.ecomedservices.com
*.engineering-complex-systems.fr
*.frankiestable.com
*.friedenventures.com
*.galstyanlaw.com
*.hableather.com
*.hard2findtoys.com
*.heartofamustang.com
*.johnviceljadds.com
*.lookingafteryourheart.com
*.master-data-sciences.fr
*.metamelb.org
*.minardsfamilyfarms.com
*.minardsfarm.com
*.minardsfarms.com
*.natividadfermin.com
*.nekosrx.com
*.rapidoceanresponse.com
*.savinggraceranch.com
*.sickdayprod.com
*.strawberriesandcashewcream.com
*.thirdhalfsoccer.com
*.tumbleweedsouth.com
*.vixkitchen.com
*.wallingfordchildcare.org
*.whitetrufflephotography.com
*.winterhawkdrive.com
70yearsofhope.com
alexcortani.com
artinvocabulary.com
bampta.org
bestdoctorssydney1.com
bestsydneyurologists.net
brookfieldfarm.com
carbonfriendly.org
chaire-data-scientist.fr
cohousingresearchnetwork.org
countryriverhomes.com
creativewoodfloors.net
crisprahead.org
dappleandgray.com
dualsdemoadvocacy.org
earthwindfireyoga.com
ecomedservices.com
engineering-complex-systems.fr
frankiestable.com
friedenventures.com
galstyanlaw.com
hableather.com
hard2findtoys.com
heartofamustang.com
johnviceljadds.com
lookingafteryourheart.com
master-data-sciences.fr
metamelb.org
minardsfamilyfarms.com
minardsfarm.com
minardsfarms.com
natividadfermin.com
nekosrx.com
rapidoceanresponse.com
savinggraceranch.com
sickdayprod.com
strawberriesandcashewcream.com
thirdhalfsoccer.com
tumbleweedsouth.com
vixkitchen.com
wallingfordchildcare.org
whitetrufflephotography.com
winterhawkdrive.com

Other certificates including the domain name natividadfermin.com

(limited to 100 certificates)
*.girlsamplified.org
customers.tigertech.net
*.serpstacker.com
*.picsbypaula.com
*.natividadfermin.com
customers.tigertech.net
*.natividadfermin.com
customers.tigertech.net
customers.tigertech.net
web13.tigertech.biz
web13.tigertech.biz
customers.tigertech.net
customers.tigertech.net
*.fidalgoukulelenetwork.com
customers.tigertech.net
*.ashevillejungcenter.org
web13.tigertech.biz
*.girlsamplified.org
customers.tigertech.net
customers.tigertech.net
*.mindandheart.org
*.ashevillejungcenter.org
customers.tigertech.net
*.girlsamplified.org
customers.tigertech.net
*.serpstacker.com
*.serpstacker.com
*.goodfitcoaching.com
*.mattdans.com
*.timitoo-systems.com
*.ashevillejungcenter.org
*.fortrexstructures.com
customers.tigertech.net
web13.tigertech.biz
web13.tigertech.biz
*.girlsamplified.org
web13.tigertech.biz
web13.tigertech.biz
*.mttampress.com

Certificate

The complete raw certificate details for *.natividadfermin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lo1wIjINuN35rG900g+
mX/ppEy3+VgIvdND0uJjpXBTuVHAHiNQoHWw9fdI25Y//ezjFHSYBSx9Js2h3Giw
pNDdqgG/TmmdSwuCImf4ch1phL8ZHyAcOk0gipdKaz7YcC9dFyd4cV95BWotP6CP
DPbVCBw7u7DfpIHIjQwnrILmR4s3IbOqPjzc8lBzKFG/unJVV4pKnXVCqhw+hQ2S
PFSpzCBtGy7/WYYl9DcW9Elg5ovfv/tPzqPKNz5Ouu59kB5uS7usKoplGzCFq21M
75RkFluy34kJNY33mqchtF5Bd75O9cB3M9EJPDvajvevrOhc94I+ikFYYKGn6YF9
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272179629574872282995109522904131326538125
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-09 08:58:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-07 08:58:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.natividadfermin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30089200775629006942849757256821023117247526762791267166758428420093127985526691037763704364256555545635620977839694041333003065131452791241792509056860097097576281106375657449115305798514273893777733866957479787121740162236680763989569369358192730424930477560341176217419166654457683291545845230811153669336612832962798313495831099367953803958032640577872520834585340886193539606306135519027065073105222566119164117346924326129129439603141426955206874110705799380112311060165196093158103290419072643814323379688401654336695983478970458551171415428959485843501796968995422458676857220830257236809152709932492441877773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8769ecec8e02e97defe9f23dc7fe7a8b9c62b6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1924 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.70yearsofhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexcortani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artinvocabulary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bampta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestdoctorssydney1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsydneyurologists.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brookfieldfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbonfriendly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaire-data-scientist.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cohousingresearchnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countryriverhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativewoodfloors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crisprahead.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dappleandgray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dualsdemoadvocacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earthwindfireyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecomedservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engineering-complex-systems.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankiestable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friedenventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galstyanlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hableather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hard2findtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heartofamustang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnviceljadds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lookingafteryourheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.master-data-sciences.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metamelb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minardsfamilyfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minardsfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minardsfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natividadfermin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nekosrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapidoceanresponse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savinggraceranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sickdayprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strawberriesandcashewcream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thirdhalfsoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tumbleweedsouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vixkitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wallingfordchildcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitetrufflephotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winterhawkdrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '70yearsofhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexcortani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artinvocabulary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bampta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestdoctorssydney1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsydneyurologists.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookfieldfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonfriendly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaire-data-scientist.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cohousingresearchnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countryriverhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativewoodfloors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisprahead.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dappleandgray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dualsdemoadvocacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthwindfireyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecomedservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering-complex-systems.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankiestable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friedenventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galstyanlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hableather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hard2findtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartofamustang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnviceljadds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lookingafteryourheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master-data-sciences.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metamelb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minardsfamilyfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minardsfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minardsfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natividadfermin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nekosrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidoceanresponse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savinggraceranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sickdayprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strawberriesandcashewcream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdhalfsoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tumbleweedsouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vixkitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallingfordchildcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitetrufflephotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winterhawkdrive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017a8ab4525e000004030046304402200697d3afbad8845771fb24067cf6881a6e1f449a9c854185fdbc5d6fb73fb2f402204862e6a117591a4007cc299101ea6e0eaee84bec5e5f5dfc12fbf7fe89c8a9ce0077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017a8ab452870000040300483046022100eb64d292b7247bc65cc218b1cc0acd8c66d57774de299d0c0017da7b589b5eca022100b6d5f2e16b744af7fabe1689fc89a2c45cad3d942a4dd4a8a9613844329ba328
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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