allwellbeauty.goprimer.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e1:ae:65:6b:51:83:20:73:c5:9b:2e:58:21:11:f3:17:e0 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=allwellbeauty.goprimer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:ae:65:6b:51:83:20:73:c5:9b:2e:58:21:11:f3:17:e0
Serial Number (int): 338132202622417072121621035852287196731360
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:fa:56:9e:45:d3:d7:42:b0:b0:31:71:ef:13:68:f6:f8:32:88:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:2c:7b:f5:40:fa:4c:68:7e:44:68:85:31:1b:df:fe:5d:b0:2f:82
Fingerprint (sha256): 46:d1:5e:b7:a0:48:36:16:d6:97:56:cc:b6:b4:bd:63:d7:c7:d2:f9:c6:c2:91:10:1e:bf:f9:f0:4a:f6:74:b3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate allwellbeauty.goprimer.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for allwellbeauty.goprimer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allwellbeauty.goprimer.com
apostrophe.goprimer.com
betterplaceforests.goprimer.com
blincinc.goprimer.com
breathe.milacares.com
buy.liveouter.com
buy.tonies.com
clubmagichour.goprimer.com
criobru.goprimer.com
curalife.goprimer.com
cutbackcoach.goprimer.com
dario.goprimer.com
discover.betterplaceforests.com
discover.fieldtriphealth.com
diversyfund.goprimer.com
drink.criobru.com
elevation.goprimer.com
evernow.goprimer.com
everymanjack.goprimer.com
explore.wineaccess.com
fieldtriphealth.goprimer.com
fiton.goprimer.com
formhealth.goprimer.com
gardens.gardenuity.com
gardenuity.goprimer.com
get.fitonapp.com
get.honehealth.com
get.metabolicrenewal.com
get.monarchmoney.com
get.montikids.com
getresults.iloveskininc.us
go.luckyvitamin.com
go.vaulthealth.com
goodfair.goprimer.com
goprimer.goprimer.com
honehealth.goprimer.com
invest.diversyfund.com
ladder.goprimer.com
langehair.goprimer.com
lifeprofitness.goprimer.com
liveouter.goprimer.com
luckyvitamin.goprimer.com
metabolicrenewal.goprimer.com
mila.goprimer.com
mirrormate.goprimer.com
monarchmoney.goprimer.com
montikids.goprimer.com
offer.mydario.com
otter.goprimer.com
picsart.goprimer.com
poweredbyelevation.goprimer.com
primeshrimp.goprimer.com
proovtest.goprimer.com
prowritingaid.goprimer.com
radfordbeauty.goprimer.com
rb.victoriaradford.com
rocksbox.goprimer.com
savvy.goprimer.com
secure.goprimer.com
shop.allwellbeauty.com
shop.goodfair.com
shop.proovtest.com
skininc.goprimer.com
soothe.goprimer.com
start.farmsteadapp.com
start.getsunday.com
start.poweredbyelevation.com
subscribe.rocksbox.com
sunday.goprimer.com
tonies.goprimer.com
try.apostrophe.com
try.blincinc.com
try.clubmagichour.com
try.curalife.com
try.cutbackcoach.com
try.evernow.co
try.everymanjack.com
try.formhealth.co
try.goprimer.com
try.joinladder.com
try.langehair.com
try.lifeprofitness.com
try.mirrormate.com
try.otter.ai
try.picsart.com
try.primeshrimp.com
try.prowritingaid.com
try.savvy.insure
try.soothe.com
try.upstep.com
try.vesselhealth.com
trysnow.goprimer.com
upstep.goprimer.com
vaulthealth.goprimer.com
vesselhealth.goprimer.com
whitening.trysnow.com
wineaccess.goprimer.com

Other certificates including the domain name goprimer.com

(limited to 100 certificates)
apostrophe.goprimer.com
tls.automattic.com
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
getapp.in
getapp.in
5000772504.goprimer.co
allwellbeauty.goprimer.com
alphalion.goprimer.com
apostrophe.goprimer.com
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
alphalion.goprimer.com
allwellbeauty.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
aj1.goprimer.co
getapp.in
goprimer.com
buy.letsbld.com
apostrophe.goprimer.com
tls.automattic.com
getapp.in
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
agirlnamedotis.goprimer.com
aj1.goprimer.co
goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
alphalion.goprimer.com
alphalion.goprimer.com
buy.letsbld.com
tls.automattic.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
ios.goprimer.com
allwellbeauty.goprimer.com
*.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
help.goprimer.com
apostrophe.goprimer.com
apostrophe.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
agirlnamedotis.goprimer.com
getapp.in
getapp.in
ios.goprimer.com
android.goprimer.com
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
tls.automattic.com
allwellbeauty.goprimer.com
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
tls.automattic.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
allwellbeauty.goprimer.com
alphalion.goprimer.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
aj.goprimer.co
getapp.in
apostrophe.goprimer.com
alphalion.goprimer.com
getapp.in
apostrophe.goprimer.com
help.goprimer.com
5000772504.goprimer.co
alphalion.goprimer.com
tls.automattic.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in

Certificate

The complete raw certificate details for allwellbeauty.goprimer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15xkIBoUtUpgG1cUBtZV
cyOvCUL/qIgOrg+JOO2vGghuTqSVXD+f1s061WloaLhPqYYiQ1j4zvL4nlRFwtVT
oKWlTLaVrUux9JeyLbQt86zWDzgyabZWGQafLynMuwxt26rbQJVGsxXlsW5efqeg
hWOV+AD6usl2F+t0V4clQyo5q0BPvtqxmMBkNFZJ3Pc6tgfONhevDdn+07xI828P
PQg3RSjkIHY5fnP1fCfzNh3O10TmA+2U106yAS+/6xbJA1V8LwFYldnmJHmfIMcL
myY8yguqjJJVD+qxpcD1vtflHXC2gm8655pawaiYxVG8xOkgnZlWccZNbo25iRqo
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338132202622417072121621035852287196731360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-23 20:31:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-21 20:31:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'allwellbeauty.goprimer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27218354900705035968599914789467890772879777407953455269794327274229796932220852303073857951752783145923273568924914056915722942091015526653415642529509994742669907280527509992881680028524969838990422116963621175914062130491600152887187208686303938818347146065663732106596616865956996705308179646411743000980412840324065149590610925320340567621926637038332952193546281847733334721189877494373925610952657098267375032295245116652170009328872294308708782329628769084391225781436189020480616224446220258775459006641698994125284155961813542491770059429557111717322043919772807648090879104673303325298508930069524284876889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36fa569e45d3d742b0b03171ef1368f6f8328891
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2225 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allwellbeauty.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apostrophe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterplaceforests.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blincinc.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breathe.milacares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.liveouter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.tonies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmagichour.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criobru.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curalife.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutbackcoach.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dario.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.betterplaceforests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.fieldtriphealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversyfund.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drink.criobru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevation.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everymanjack.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.wineaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldtriphealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiton.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formhealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardens.gardenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardenuity.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.fitonapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.honehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.metabolicrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.monarchmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.montikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getresults.iloveskininc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.luckyvitamin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.vaulthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodfair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goprimer.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honehealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.diversyfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladder.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langehair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeprofitness.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveouter.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckyvitamin.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolicrenewal.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mila.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirrormate.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monarchmoney.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montikids.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offer.mydario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otter.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picsart.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poweredbyelevation.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primeshrimp.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proovtest.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prowritingaid.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radfordbeauty.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rb.victoriaradford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocksbox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savvy.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.allwellbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goodfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.proovtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skininc.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soothe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.farmsteadapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.getsunday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.poweredbyelevation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.rocksbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunday.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonies.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.apostrophe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.blincinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.clubmagichour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.curalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cutbackcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.everymanjack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.formhealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.joinladder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.langehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.lifeprofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.mirrormate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.otter.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.primeshrimp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.prowritingaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.savvy.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.soothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.upstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.vesselhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trysnow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstep.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaulthealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesselhealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitening.trysnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineaccess.goprimer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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