lists.bwajakarta.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:b4:73:dc:43:aa:80:1a:99:75:3e:7e:a8:5e:6d:2c:58 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lists.bwajakarta.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:b4:73:dc:43:aa:80:1a:99:75:3e:7e:a8:5e:6d:2c:58
Serial Number (int): 307855122317399554344800683344728022658136
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:3f:42:a9:5d:4a:1b:82:2d:2a:8a:1d:1f:e4:5f:74:7c:19:8d:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 84:92:2f:28:03:a4:f3:0e:e7:58:1d:11:a3:1c:d9:55:bc:2a:64:24
Fingerprint (sha256): 4b:5f:6c:ec:5f:b0:42:b6:63:bd:79:48:85:32:5a:c8:a7:7d:4b:73:12:8c:cd:f5:c0:fe:e7:08:99:6f:75:0f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lists.bwajakarta.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.bwajakarta.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.bwajakarta.org
lists.byronbible.org
lists.bytheseaproductions.org
lists.cactroy.org
lists.cafebacchus.net
lists.callicomp.com
lists.callicomp.info
lists.callihans.com
lists.callihans.net
lists.callihans.org
lists.calvaryhillsbaptist.org
lists.cambridgewomenscommission.org
lists.campaignforequaljustice.org
lists.candiceheld.com
lists.capitalregionbluesnetwork.org
lists.carolynmcc.com
lists.carsplusdms.com
lists.carsplussoftware.com
lists.caryjohnfranklin.com
lists.catscradle.us
lists.cbcdc.org
lists.cedarbrookcamps.org
lists.cedarbrooktexas.com
lists.cej-oregon.org
lists.celebratelit.com
lists.cementedtensions.com
lists.centerforsustainableliving.org
lists.cfms.org
lists.chainsrequired.com
lists.championstoragetexas.com
lists.charlespanderson.com
lists.charlottechurch.org
lists.chashama.info
lists.cheeseshopmystery.com
lists.chicksingernight.com
lists.childrenshomeofkingston.org
lists.chimneysweepenergycorp.com
lists.chkingston.org
lists.chriskanther.com
lists.chuantaokungfu.com
lists.citypsych.net
lists.civicorchestrampls.org
lists.clearcreekems.com
lists.cliffrichardsongs.com
lists.climateequityreference.org
lists.clj-usa.org
lists.clroth.com
lists.cobha.org
lists.codependents.org
lists.coffeesystemhv.com
lists.coffeesystemshv.com
lists.cohousing.org
lists.cohousingresearchnetwork.org
lists.colemancatholic.com
lists.colemancatholic.net
lists.colemancatholic.org
lists.collectiveresilience.com
lists.comprotoner.com
lists.connectingimmigrants.org
lists.connecttosuccesspdx.com
lists.conversation.ca
lists.copakecountryclub.com
lists.cowgirlspirit.org
lists.crbn.org
lists.cscohomail.org
lists.csrhoa.org
lists.cuttingsys.com
lists.dabblewood.com
lists.dalecomputer.com
lists.danbrownandassociates.com
lists.danlavorel.com
lists.dannybritt.com
lists.deafbiographies.com
lists.deegan-sanglyn.com
lists.deegansanglyn.com
lists.deerpark.in
lists.defenderoftheflow.com
lists.deliberate.com
lists.denisvengeance.com
lists.dental.ae
lists.design-interaction.com
lists.diocesan-tech.org
lists.discohog.com
lists.divenet.com
lists.dixie-csa.net
lists.djsuperfox.com
lists.dlsc.us
lists.doctoramber.com
lists.domontgallery.com
lists.donaleensaul.com
lists.dorenesteggell.com
lists.dottywood.org
lists.downeyboyscouts.com
lists.downeyboyscouts.org
lists.dracoventions.com
lists.drdandelion.com
lists.dugout-memories.com
lists.dutchesscountyroofing.com

Other certificates including the domain name bwajakarta.org

(limited to 100 certificates)
*.ruinasdebonampak.edu.mx
lists.nikibikidress.com
customers.tigertech.net
lists.0100101110101101.org
*.divinemercyformoms.com
*.soundslikeheaven.com
*.ruinasdebonampak.edu.mx
customers.tigertech.net
lists.brookfieldfarm.com
lists.bigteezesalon.com
customers.tigertech.net
lists.brookfieldfarm.com
lists.0100101110101101.org
lists.0100101110101101.org
lists.swimkingpools.com
customers.tigertech.net
lists.bwajakarta.org
*.bwajakarta.org
lists.dhaudioandhometheater.com
lists.bigteezesalon.com
lists.mawturners.com
lists.brookfieldfarm.com
lists.upsstorage.com
lists.0100101110101101.org
*.segra.com.mx
*.ruinasdebonampak.edu.mx
lists.familyfitnessandfreedom.com
*.ruinasdebonampak.edu.mx
*.departamentoendf.com.mx
lists.celiet.com
customers.tigertech.net
*.michaeleustice.com
customers.tigertech.net
lists.rasterms.com
*.haydonflynn.com.au
lists.iafflocal5031.org
lists.inuverse.com
*.soundslikeheaven.com
customers.tigertech.net
*.nancymladenoff.com
*.shrewsburycarpetcleaners.co.uk
*.plannedparenthoodhawaii.org
customers.tigertech.net
lists.0100101110101101.org
customers.tigertech.net
lists.brookfieldfarm.com

Certificate

The complete raw certificate details for lists.bwajakarta.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJHfFjriTRH2Wzc15ArF
e+g7bSEDD/bmQBvIzG++QR3L7W19/+kSb71BMOgvVIDZpcgvwX7fIkGJdevfnILm
QZqdNnmG52g+y9JoOE3yYaUmQsgWWbRY8mzZHCjXDOorW6+uMV/40C7RiuuLH9Wq
1ZQRCn/wFcanFD+KSTjbjxcloawABd/nrOv24c5yLR0qH+gVAQDi6ZZHsA2SZfvd
DhSnX5jGvHlTvEUlcLGk8h6VQiSNuXZedq8v8bYCaThKuwvYLa9cpqrpH7R9GBjC
vTntyrCfTv8RGHS+NDN1HVq3WToRlQJEEj04XcUUNugdyOM2ccnOBYSXYW+4BngY
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307855122317399554344800683344728022658136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-07 06:25:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-05 06:25:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.bwajakarta.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24309686438010488905831354453442404266253605059115381720402950745326854352159658512865834392177191885777416207294811536058795049109676781332315435634097961109356562899704370526527265356736053481939492444483102811947639291157896260325185487831294983932533418278144399215027838112086112023846002213023540143383776794534732583565033936039111056502528780706075083134574018234281603861653727506487849962192664100617491512471482156036049416311210607075041825770927749499893510841889236960892889506989695162235820860163360336977422292748717561569929982020753085796187755007616523875133904311988743579157444378501769835583739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b3f42a95d4a1b822d2a8a1d1fe45f747c198d1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2471 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bwajakarta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.byronbible.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bytheseaproductions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cactroy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cafebacchus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callicomp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callicomp.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callihans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callihans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.callihans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.calvaryhillsbaptist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cambridgewomenscommission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.campaignforequaljustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.candiceheld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.capitalregionbluesnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.carolynmcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.carsplusdms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.carsplussoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.caryjohnfranklin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.catscradle.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cbcdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cedarbrookcamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cedarbrooktexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cej-oregon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.celebratelit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cementedtensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.centerforsustainableliving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cfms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chainsrequired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.championstoragetexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.charlespanderson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.charlottechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chashama.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cheeseshopmystery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chicksingernight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.childrenshomeofkingston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chimneysweepenergycorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chkingston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chriskanther.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.chuantaokungfu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.citypsych.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.civicorchestrampls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.clearcreekems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cliffrichardsongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.climateequityreference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.clj-usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.clroth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cobha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.codependents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.coffeesystemhv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.coffeesystemshv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cohousing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cohousingresearchnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.colemancatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.colemancatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.colemancatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.collectiveresilience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.comprotoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.connectingimmigrants.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.connecttosuccesspdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.conversation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.copakecountryclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cowgirlspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.crbn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cscohomail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.csrhoa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cuttingsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dabblewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dalecomputer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.danbrownandassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.danlavorel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dannybritt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deafbiographies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deegan-sanglyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deegansanglyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deerpark.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.defenderoftheflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.deliberate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.denisvengeance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dental.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.design-interaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.diocesan-tech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.discohog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.divenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dixie-csa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.djsuperfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dlsc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.doctoramber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.domontgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.donaleensaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dorenesteggell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dottywood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.downeyboyscouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.downeyboyscouts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dracoventions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.drdandelion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dugout-memories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.dutchesscountyroofing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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