lichtensteig.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:91:80:15:eb:2e:4e:f2:fe:40:c2:93:09:23:46:0a:c0:05 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lichtensteig.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:91:80:15:eb:2e:4e:f2:fe:40:c2:93:09:23:46:0a:c0:05
Serial Number (int): 397960341922306748177085622174123056349189
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 48:98:f4:e4:93:dc:4d:cf:36:c7:d6:53:32:e7:af:c0:20:6c:7e:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:b3:d1:fa:80:40:b4:9c:9a:3b:d9:e7:1f:78:0d:65:54:0d:66:8d
Fingerprint (sha256): 47:c2:f5:ac:d2:dc:75:68:2e:dd:53:38:37:05:98:27:ed:b7:d3:67:2b:6f:9d:cc:11:a6:68:85:c5:1d:3a:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lichtensteig.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lichtensteig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

408leaf.com
aberprice.com
anonman.com
argustelecom.com
bamboocontainment.org
bettyhutton.com
billdeblasioon.com
billingsregenerativemedicine.com
bit4bid.com
cerebralpalsyfacts.org
church-wedding.com
classicard.com
clinicmobile.com
collegeapparel.cool
corneo.click
cryptocarton.com
cursosdigitales.com
ekomanifesto.com
freshafcoffee.com
furbur.com
georgiastemcellcenter.com
growgoodgarden.com
holdmypronoun.com
hpyco.com
keithhayhomes.com
kheswa.com
kingofwar.com
leakyship.com
lichtensteig.com
marylandprp.com
miraclestone.com
missouricomingsoon.com
neckdickies.com
nord-storm.com
noveltybirthdaycakes.com
publicdonotcall.com
purewindowclean.com
quotemondiali.com
retro-fashion.com
ripoffdoc.com
santafestemcell.com
saulcohen.com
sokec.com
stemcellmaster.com
stlouisfirewood.com
tresstribe.com
trump2024coin.com
ultimatestarterpack.com
voipapi.org
www.408leaf.com
www.aberprice.com
www.anonman.com
www.argustelecom.com
www.bamboocontainment.org
www.bettyhutton.com
www.billdeblasioon.com
www.billingsregenerativemedicine.com
www.bit4bid.com
www.cerebralpalsyfacts.org
www.church-wedding.com
www.classicard.com
www.clinicmobile.com
www.collegeapparel.cool
www.corneo.click
www.cryptocarton.com
www.cursosdigitales.com
www.ekomanifesto.com
www.freshafcoffee.com
www.furbur.com
www.georgiastemcellcenter.com
www.growgoodgarden.com
www.holdmypronoun.com
www.hpyco.com
www.keithhayhomes.com
www.kheswa.com
www.kingofwar.com
www.leakyship.com
www.lichtensteig.com
www.marylandprp.com
www.miraclestone.com
www.missouricomingsoon.com
www.neckdickies.com
www.nord-storm.com
www.noveltybirthdaycakes.com
www.publicdonotcall.com
www.purewindowclean.com
www.quotemondiali.com
www.retro-fashion.com
www.ripoffdoc.com
www.santafestemcell.com
www.saulcohen.com
www.sokec.com
www.stemcellmaster.com
www.stlouisfirewood.com
www.tresstribe.com
www.trump2024coin.com
www.ultimatestarterpack.com
www.voipapi.org
www.xupiter.com
xupiter.com

Other certificates including the domain name lichtensteig.com

(limited to 100 certificates)
www.defivia.com
tobaccystarterpack.com
handicappedbath.com
www.durawash.com
davidhook.com
ucc3.com
www.antitrumpveterans.com
www.gentlemate.com
lichtensteig.com
ktcare.com
pnline.com
islandbrewer.com
www.sri529plans.com
oder.co
map.email
vacationrentalcozumel.com
www.stakinghardware.com
lichtensteig.com
lichtensteig.com
excellentporno.com
lifetimecards.com
www.busymate.com
www.flawlessskincleanse.com
proecovercreator.com
lichtensteig.com

Certificate

The complete raw certificate details for lichtensteig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3ExbmMhQEP1FEmJeEni
dIKhYOUra2qdv0yjTwSqCBlAFlad11kJCjBEEmpeKZeu4Jrgh1wG4qTOL6CoUuCC
uZQ18u54M7NuF3xfbmL+HvRkTlVwffKEPachycZEWTQHXN0soK62mWqFEtBFsHXi
0SAoskQBhcOwrJHT8l2iD4vG5H/zEjK4G92G3UDqubsQ/EXhFIkZucrjdMBinKXv
81ShFaZ9MyZMZlj+sJ7U+bhblX64oOWW3L2pQzApLa/xTiqHbo9J3mIXfMEazVhB
V/hjLhdSseYE8f9n6ONd/gsFcgrGGfF/Pz6Y6YfV+mFUO3S+7Y9Y1KqB9EZLOYv3
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397960341922306748177085622174123056349189
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 17:43:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 17:43:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lichtensteig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24672287061719008591328183505136804745876415988892124313546769254546009585947666976518667580716326785119351008635252064848869681818329014501295525749528646090250317595478938014117577086463135762493338840460412902601428704721121992807170245590501619895205933331961502033408732029089624349846434954909660854802523044760679909821363850940176127379482649095305382159043158165803992642147298870180675452699987797095724900027988627048224227728420921047596319662410692987056736564041466736201401969239351612842118597838885874071169512650763948313065188999361649303012021662304021841332922172736323481696486470281060265228191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4898f4e493dc4dcf36c7d65332e7afc0206c7ef7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2024 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '408leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anonman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argustelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamboocontainment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettyhutton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billdeblasioon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billingsregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bit4bid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerebralpalsyfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church-wedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classicard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegeapparel.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corneo.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptocarton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursosdigitales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekomanifesto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshafcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furbur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiastemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growgoodgarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdmypronoun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keithhayhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kheswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingofwar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leakyship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lichtensteig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marylandprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miraclestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missouricomingsoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neckdickies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nord-storm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noveltybirthdaycakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicdonotcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purewindowclean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotemondiali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retro-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ripoffdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santafestemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saulcohen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sokec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouisfirewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tresstribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trump2024coin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimatestarterpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voipapi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.408leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aberprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anonman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.argustelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bamboocontainment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettyhutton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billdeblasioon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billingsregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bit4bid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cerebralpalsyfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.church-wedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.classicard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clinicmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegeapparel.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corneo.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptocarton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cursosdigitales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ekomanifesto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freshafcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.furbur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgiastemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growgoodgarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holdmypronoun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keithhayhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kheswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingofwar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leakyship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lichtensteig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylandprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miraclestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missouricomingsoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neckdickies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nord-storm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noveltybirthdaycakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicdonotcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purewindowclean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quotemondiali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retro-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ripoffdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santafestemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saulcohen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sokec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouisfirewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tresstribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trump2024coin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultimatestarterpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voipapi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xupiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xupiter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f4dd1c86500000403004730450220140baeb465be81e8f85844d1f36f053a0a9477cc76a688c49486d6288957c7f20221009dd21b0921c0d2afae88498f6529186b5d5e543a127638053b1985461e5336f5007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f4dd1c8570000040300473045022100c56b5c16feabdd712bcf2bb7939aa5829017d96753ba4d33d3f8e07a6f9418780220112c953b57d01506ef931e383bc7534129d0fca868b1a787c18465cf6c73c2ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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