*.acresofhope.net

Issued by R3

About this certificate

This digital certificate with serial number 03:97:61:0c:37:17:9e:a7:b2:2f:00:ab:f0:1b:70:34:f5:2f was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.acresofhope.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:61:0c:37:17:9e:a7:b2:2f:00:ab:f0:1b:70:34:f5:2f
Serial Number (int): 312848493740899764482726356444762005108015
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:05:28:5a:23:08:6e:90:ea:da:ec:7e:ff:f9:af:e4:0a:65:b8:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f5:b7:cd:49:af:82:46:37:c1:7c:18:d4:bf:70:4c:25:6b:b4:b8:f4
Fingerprint (sha256): 4b:c6:f9:66:f9:35:1f:7c:2f:9e:7b:99:a3:31:ea:dc:31:fb:82:da:00:67:3f:49:49:fd:27:ba:75:62:49:93

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.acresofhope.net

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.acresofhope.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acresofhope.net
*.alpeq.com
*.berkeleyacuproject.com
*.berkeleyacupunctureproject.com
*.bizinzoom.com
*.ccdbr.org
*.chevassus.org
*.citizens.org
*.copakecountryclub.com
*.crypticslaughter.com
*.expectationlabs.com
*.footprintsofpanafricanism.com
*.georgerstewart.com
*.georgiabikes.org
*.guildofbeersommeliers.com
*.hereaslongasittakes.com
*.huntingtonbeachestatesales.com
*.jaclyntouchstone.com
*.joviko.org
*.lagunawoodsestatesales.com
*.lanhameconomics.com
*.leisureworldestatesales.com
*.lenavitone.com
*.mackinawareaconferenceandreceptioncenter.com
*.mackinawcityconferenceandreceptioncenter.com
*.mackinawcityconferencecenter.com
*.mackinawcityconferences.com
*.mackinawcityreceptionandconferencecenter.com
*.mackinawconferenceandreceptioncenter.com
*.mackinawconferences.com
*.mackinawreceptions.com
*.margiehanna.com
*.masterofartsinteaching.net
*.maxlust.com
*.mikebrayton.com
*.nkm2.org
*.ocestatesales.com
*.orangecountyestatesaleservices.com
*.petsittingmassachusetts.com
*.realmensch.org
*.rlslawyers.com
*.shakenstir.com
*.thebackyardgardener.net
*.tustinestatesales.com
*.unequal-design.com
*.worldstallestdonkey.com
acresofhope.net
alpeq.com
berkeleyacuproject.com
berkeleyacupunctureproject.com
bizinzoom.com
ccdbr.org
chevassus.org
citizens.org
copakecountryclub.com
crypticslaughter.com
customers.tigertech.net
expectationlabs.com
footprintsofpanafricanism.com
georgerstewart.com
georgiabikes.org
guildofbeersommeliers.com
hereaslongasittakes.com
huntingtonbeachestatesales.com
jaclyntouchstone.com
joviko.org
lagunawoodsestatesales.com
lanhameconomics.com
leisureworldestatesales.com
lenavitone.com
mackinawareaconferenceandreceptioncenter.com
mackinawcityconferenceandreceptioncenter.com
mackinawcityconferencecenter.com
mackinawcityconferences.com
mackinawcityreceptionandconferencecenter.com
mackinawconferenceandreceptioncenter.com
mackinawconferences.com
mackinawreceptions.com
margiehanna.com
masterofartsinteaching.net
maxlust.com
mikebrayton.com
nkm2.org
ocestatesales.com
orangecountyestatesaleservices.com
petsittingmassachusetts.com
realmensch.org
rlslawyers.com
shakenstir.com
thebackyardgardener.net
tustinestatesales.com
unequal-design.com
worldstallestdonkey.com

Other certificates including the domain name acresofhope.net

(limited to 100 certificates)
customers.tigertech.net
web08.tigertechnologies.net
customers.tigertech.net
*.sharianddaveblues.com
*.blueoceannet.org
*.rose-fund.org
web08.tigertechnologies.net
web08.tigertechnologies.net
*.cantertruck.com
customers.tigertech.net
*.blueoceannet.org
*.blueoceannet.org
*.acresofhope.net
*.blueoceannet.org
*.aliceandarvi.com
*.mackinawreceptionandconferencecenter.com
acresofhope.net
customers.tigertech.net
*.aliceandarvi.com
web08.tigertechnologies.net
*.rose-fund.org
web08.tigertechnologies.net
*.jamesjohnsonarts.com
*.blueoceannet.org
live.acresofhope.net
*.blueoceannet.org
customers.tigertech.net
web08.tigertechnologies.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.samsfinestcuts.com
customers.tigertech.net
*.himrecruiters.com
web08.tigertechnologies.net

Certificate

The complete raw certificate details for *.acresofhope.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQFI1QkEOorS+s0gh4xp
llazJ/4kB8IGW+y66FQ3bvmP8LIWwSP0jdxQGr+CqGWNk1ldthwHrTUoA2TvttoJ
Sh33iG9jgNZgH8dopA1rsUfo+++XLEGTFd6ES+gyV8KI3v3HoylJbzNanI778PIn
KmOBsnKYdy9wOVr8xn+LT/Nzoz9i1gGV62EvROlowhT4L6/cd3G9vpx7A80h35x2
qIuxtoHKDLsYSPko2F+u4zPSRE9cqtkZ6Io0km8sO6m8cNAzmrkatbcbcFjQ+xpG
anVcKBatADR0WdbF/vd6fVFgKjNKMr+7fyzzq2fi8PFEBvhlYKoNYWiK1hi9tbk8
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312848493740899764482726356444762005108015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-01 07:48:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 07:48:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.acresofhope.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23859673049467824317950401595186535599030750102230925712118561837726860069302396522865153391522321777947842197288252815213045716591083358758617102761417100238577604732896530115999784103963940003824043312410709175364871899476829418866182461491666448503074816717961593944780751277981476749413151574172364105209429042537949530709625133890529664370715836364504182912047721007670900872790439621957790346135066169580787326476283128009622461139148032953696151865352099493772160983818104215819001778476058672760054006493441244889180489442972836114179518537489159036265239653223392245759439201896306776377056698378196046396609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2705285a23086e90eadaec7efff9afe40a65b82a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2297 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acresofhope.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpeq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berkeleyacuproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berkeleyacupunctureproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bizinzoom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccdbr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chevassus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citizens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copakecountryclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crypticslaughter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expectationlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footprintsofpanafricanism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.georgerstewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.georgiabikes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guildofbeersommeliers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hereaslongasittakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huntingtonbeachestatesales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaclyntouchstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joviko.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagunawoodsestatesales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lanhameconomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leisureworldestatesales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lenavitone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mackinawareaconferenceandreceptioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mackinawcityconferenceandreceptioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mackinawcityconferencecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mackinawcityconferences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mackinawcityreceptionandconferencecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mackinawconferenceandreceptioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mackinawconferences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mackinawreceptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.margiehanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masterofartsinteaching.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxlust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mikebrayton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nkm2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocestatesales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orangecountyestatesaleservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petsittingmassachusetts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realmensch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rlslawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shakenstir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebackyardgardener.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tustinestatesales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unequal-design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldstallestdonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acresofhope.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpeq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyacuproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyacupunctureproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizinzoom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccdbr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chevassus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copakecountryclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crypticslaughter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.tigertech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expectationlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footprintsofpanafricanism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgerstewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiabikes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guildofbeersommeliers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hereaslongasittakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtonbeachestatesales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaclyntouchstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joviko.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagunawoodsestatesales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanhameconomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leisureworldestatesales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenavitone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mackinawareaconferenceandreceptioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mackinawcityconferenceandreceptioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mackinawcityconferencecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mackinawcityconferences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mackinawcityreceptionandconferencecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mackinawconferenceandreceptioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mackinawconferences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mackinawreceptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margiehanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterofartsinteaching.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxlust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikebrayton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkm2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocestatesales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangecountyestatesaleservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petsittingmassachusetts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realmensch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlslawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shakenstir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebackyardgardener.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tustinestatesales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unequal-design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldstallestdonkey.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001873c01010000000403004630440220741ccfc3e95ac87d8ef08a1f98a5e2ce87626bbcef0d9c8e7c03911df31525ee022054a194566c1028420ff520faac8da26fa9dc5a62a8bd67718fd8b15ae806bfd3007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001873c0100f700000403004730450221009c5a0d411325d810ba17d49836788f2deefae044591345dcb3b8e2adf869a3ab02206533d01c7be1d385a777edb0f622575f7fab1a4baef624376af44dcdfa8e60b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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