johndrevniok.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:41:31:dd:35:27:fa:fa:c3:ce:f9:0b:87:d2:de:35:d3:d2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=johndrevniok.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:31:dd:35:27:fa:fa:c3:ce:f9:0b:87:d2:de:35:d3:d2
Serial Number (int): 283521492392676218879853760361377731826642
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:d3:08:f0:a2:b5:17:64:8c:7c:ae:f1:46:07:5e:c3:72:90:c8:d6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:29:dc:c6:01:67:f7:8e:3b:6f:66:62:cc:8d:41:1d:cf:ca:e4:80
Fingerprint (sha256): 47:f4:e9:31:1f:65:e2:54:46:5d:15:78:a4:3f:02:9d:b0:e0:7c:67:d6:0b:8d:12:36:75:22:46:74:d0:40:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate johndrevniok.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for johndrevniok.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

34650.com
3dforgood.com
41584.com
41726.com
635.me
69472.com
69581.com
69785.com
71541.com
aifortzl.nl
azarena.com
azprepared.com
breedclub.com
businessmarketingdegree.website
cannabislawbyzipcode.com
cartinaditalia.com
castronuovodisantandrea.com
commerceinside.com
cryptoportfolioinsurance.com
dickcheese.org
eccentrica.org
everydaycounts.world
fortworthcosmeticdentistry.org
globalisation.exposed
gmopoisonedfood.com
hava.cab
hearmed.com
hipforce.com
johndrevniok.ca
kansasstemcellclinic.com
kilikia.com
masteride.com
matters-llc.com
mommybd.com
motoristica.com
opticscience.com
palmadimontechiaro.org
pickaberry.org
preschoolplayouse.org
prodottidipesce.com
prpomaha.com
reide.com
romaust.nl
solar-guard.com
southbucksrealestate.co.uk
spezzanodellasila.com
sportstherapyflorida.com
stimatchmaking.dating
tularosabasinweb.com
www.34650.com
www.3dforgood.com
www.41584.com
www.41726.com
www.635.me
www.69472.com
www.69581.com
www.69785.com
www.71541.com
www.aifortzl.nl
www.azarena.com
www.azprepared.com
www.breedclub.com
www.businessmarketingdegree.website
www.cannabislawbyzipcode.com
www.cartinaditalia.com
www.castronuovodisantandrea.com
www.commerceinside.com
www.cryptoportfolioinsurance.com
www.dickcheese.org
www.eccentrica.org
www.everydaycounts.world
www.fortworthcosmeticdentistry.org
www.globalisation.exposed
www.gmopoisonedfood.com
www.hava.cab
www.hearmed.com
www.hipforce.com
www.johndrevniok.ca
www.kansasstemcellclinic.com
www.kilikia.com
www.masteride.com
www.matters-llc.com
www.mommybd.com
www.motoristica.com
www.opticscience.com
www.palmadimontechiaro.org
www.pickaberry.org
www.preschoolplayouse.org
www.prodottidipesce.com
www.prpomaha.com
www.reide.com
www.romaust.nl
www.solar-guard.com
www.southbucksrealestate.co.uk
www.spezzanodellasila.com
www.sportstherapyflorida.com
www.stimatchmaking.dating
www.tularosabasinweb.com
www.xn--beypazar-0kb.com
xn--beypazar-0kb.com

Other certificates including the domain name johndrevniok.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for johndrevniok.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0lc0b+oqyA7CHC8RqcV
GRxxiPclE/t67jQ51kn2EPjMajjcPrXkJaldzH6QM490X4vZtOeHx0C3/taqhtR/
ejLlD1ucbnxVr8HOob0vLYVk8o8OL5VBP83VQLcJUXKPGF2fhC6ZF+3VgOFYKJBt
Ooz5Ya0l9EgB+txEsOdxNwx57ctnQrWV4ka4KIva3+jUl1wf7KXD5GYcJtTTnhwp
2f4Tg6T/a5zX2yFAUnxoVw71eJpbLXiojyL23KMpOkp01jXYTa6rvWiiVvAXssMj
clFK7ZfvYx4tbaZ0ViK2mUJUMglnsLp2V1lISBiQ4+pdXV/WAVnUgBT00Eudvp1L
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283521492392676218879853760361377731826642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-22 17:59:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-21 17:59:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'johndrevniok.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23642739462951445826712578417049805816379595071867232467115084419418255692793136881366269526056778175614366925698131522897118174365453821812377624962151084002462709017489509260440943569044851064880177843689881947346524020340576080539042679185604647124224392908385585963670381347547562491850611054753620242075565447117063667523903065149708136066796485882309093735928022499725265514718039065067382255236988770788689719903241449944917970449660658740156826866126046441561985527162611471871055278035771971764563137681663501109289817660303831758535304319445734447674595273821220316198575150412458014360014039394164414434271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7d308f0a2b517648c7caef146075ec37290c8d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2004 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '34650.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dforgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '41584.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '41726.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '635.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '69472.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '69581.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '69785.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '71541.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aifortzl.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azarena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azprepared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breedclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessmarketingdegree.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabislawbyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartinaditalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castronuovodisantandrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerceinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptoportfolioinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dickcheese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eccentrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everydaycounts.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthcosmeticdentistry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalisation.exposed'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmopoisonedfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hava.cab'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johndrevniok.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansasstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kilikia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masteride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matters-llc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mommybd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motoristica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmadimontechiaro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickaberry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preschoolplayouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodottidipesce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romaust.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solar-guard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbucksrealestate.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spezzanodellasila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportstherapyflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stimatchmaking.dating'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tularosabasinweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.34650.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dforgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.41584.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.41726.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.635.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.69472.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.69581.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.69785.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.71541.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aifortzl.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azarena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azprepared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breedclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businessmarketingdegree.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannabislawbyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartinaditalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castronuovodisantandrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerceinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptoportfolioinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dickcheese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eccentrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everydaycounts.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortworthcosmeticdentistry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalisation.exposed'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmopoisonedfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hava.cab'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hearmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hipforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johndrevniok.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansasstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kilikia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masteride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matters-llc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mommybd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motoristica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opticscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmadimontechiaro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickaberry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preschoolplayouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prodottidipesce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prpomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romaust.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solar-guard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southbucksrealestate.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spezzanodellasila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportstherapyflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stimatchmaking.dating'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tularosabasinweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--beypazar-0kb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--beypazar-0kb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a466af6f60000040300473045022100e80d74f3a76bb5b9672addf8247470226b3a7ef210a9d885209ea3b4565641fe02205568f344267e15757422557bfd4383a09fa88272881cf5f43bf149bca10e828f007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a466af76800000403004830460221008cbaf52a92847bc987fdf05c84eed40a9b5b6c30194221e2a3fd91bc804d2afe0221008c520fedb2fdd10f56eaf2e81a231807adbdd866702c85d4cf11e09210cca426
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007a55a3eff2d0d2ff899b8ec1c6438dab34afa1b42a5c9705289fd7a9c2961891012670b8270aa6a2b48258915ed0fa905ade32fe7b535ec53484497818fd247823a3700dd65c4d72515f5e1184dc4972e56c5e87c133dee56441f5de8c5a07e1937516af55d5daae730d077df18b30f362e56c81845235f1db8923649976f90087a6ef50575b2d907f672df3b07b55b8551b2e10fa853f0192d80e0d25d0fed7e81e57863d8ddce614b0221e70c1bdc0cde7d0040e011af8e2979281f94376bc0621d9fe97c9dce48d57c4732e5223c735c644030ed55fd75ccb42e277044f25c9438caac9fd92dc0267e74e75238845424dfd067ebaf1a183215a9ce35795ff