san1591.cdntwrk.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b2:2e:a1:aa:51:aa:2f:95:81:3b:92:9c:78:0f:4c:d0:13 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san1591.cdntwrk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:2e:a1:aa:51:aa:2f:95:81:3b:92:9c:78:0f:4c:d0:13
Serial Number (int): 321969103009287900435393209729018804097043
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:5f:73:26:be:08:48:8e:d0:cb:41:a0:69:cd:45:71:95:01:b1:6c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:6a:f0:94:c2:93:04:3f:65:e9:63:65:d2:9d:9b:21:22:8d:23:bf
Fingerprint (sha256): 4f:5f:d9:24:26:ec:40:c0:a9:f0:97:ef:31:73:c9:34:bc:c2:34:d4:08:75:10:1d:fd:e7:bc:a1:8f:19:a2:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san1591.cdntwrk.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san1591.cdntwrk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.dynamicsignal.com
blog.booker.com
canadianadvisoryboard.equifax.ca
content.hubdoc.com
content.snapapp.com
content.southwestsolutions.com
content.ssp-worldwide.com
digital.insidegolfmedia.com
digital.irishgolfer.ie
digital.macdirectory.com
digital.meetinreykjavik.is
digital.miamilivingmagazine.com
digital.oceanhomemag.com
digital.virtualmobiletechnologies.com.mx
epubs.aallnet.org
flip.summitcat.com
hcmresources.avanti.ca
hi.iaq.net
hub-en.equifax.ca
hub-fr.equifax.ca
hub.bluetarp.com
hub.content4demand.com
hub.pennwealth.com
hub.praxisvet.com
hub.randallreillycustom.com
hub.retailtouchpoints.com
hub.sxsw.com
ideas.baudville.com
info.looker.com
insights.randstadsourceright.com
insights.travelandtransport.com
learn.avanti.ca
magazine.cyclenews.com
partners.cloudwords.com
publications.ovma.org
read.cluttoncox.co.uk
read.dmtmag.com
read.timesprintingdigital.com
resourcecenter.abilitynetwork.com
resources.apriori.com
resources.auduboncompanies.com
resources.biznessapps.com
resources.boaweb.com
resources.cloudwords.com
resources.datanyze.com
resources.dynamicsignal.com
resources.moredirect.com
resources.pathguide.com
san1591.cdntwrk.com
uberflip.westsidedigs.com
viewer.e-digitaledition.com
www.balharbourdigital.com
www.balharbourfloridaguide.com
www.balharbourfloridaguidebrazil.com
www.balharbourfloridaguidelatinamerica.com
www.balharbourfloridaguidemexico.com
www.cultureddigital.com
www.hub.camaf.co.za
www.icloudmobilemedia.com
www.newlifestylesdigital.com
www.southbaydiggs.com
www.swppcdigital.com
www.topsnews.org
www.ultratravelusdigital.com
www.veniceftldigital.com

Other certificates including the domain name cdntwrk.com

(limited to 100 certificates)
ssl3.cdntwrk.com
ssl3.cdntwrk.com
san1297.cdntwrk.com
ssl3.cdntwrk.com
san2742.cdntwrk.com
san3263.cdntwrk.com
ssl.cdntwrk.com
san2859.cdntwrk.com
san311.cdntwrk.com
san3223.cdntwrk.com
*.cdntwrk.com
san663.cdntwrk.com
ssl.cdntwrk.com
san2988.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
ssl3.cdntwrk.com
san2751.cdntwrk.com
content.cdntwrk.com
san1615.cdntwrk.com
ssl2.cdntwrk.com
san400.cdntwrk.com
san339.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san645.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san2074.cdntwrk.com
ssl3.cdntwrk.com
san3124.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
san2721.cdntwrk.com
ssl2.cdntwrk.com
san2441.cdntwrk.com
ssl3.cdntwrk.com
san3129.cdntwrk.com
san2781.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
san3249.cdntwrk.com
ssl.cdntwrk.com
ssl3.cdntwrk.com
san606.cdntwrk.com
san2970.cdntwrk.com
ssl2.cdntwrk.com
san3132.cdntwrk.com
ssl3.cdntwrk.com
san1010.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
api.cdntwrk.com
san2991.cdntwrk.com
san2074.cdntwrk.com
ssl.cdntwrk.com
san2459.cdntwrk.com
ssl5.cdntwrk.com
ssl3.cdntwrk.com
san275.cdntwrk.com
*.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl5.cdntwrk.com
san753.cdntwrk.com
ssl3.cdntwrk.com
san470.cdntwrk.com
san3166.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
san3098.cdntwrk.com
san2537.cdntwrk.com
san732.cdntwrk.com
ssl2.cdntwrk.com
san2366.cdntwrk.com
san2468.cdntwrk.com
san398.cdntwrk.com
ssl2.cdntwrk.com
san3231.cdntwrk.com
content.cdntwrk.com
app.cdntwrk.com
san2937.cdntwrk.com
san464.cdntwrk.com
san2706.cdntwrk.com
ssl3.cdntwrk.com
ssl.cdntwrk.com
san2317.cdntwrk.com
san2234.cdntwrk.com
san3265.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san293.cdntwrk.com
san2504.cdntwrk.com

Certificate

The complete raw certificate details for san1591.cdntwrk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XLZoEguFokz9tAiYLOh
tJlvjOZ1EVZqNbVJvFXAVnN8K/Y8OZCwUTILefrvEDwws5s2pEzP0mu7RCJRvOIb
tELFXBj7GPW7Es0l6qBtUM/PdTwFb/dkjBYtL/XGpKL84ICorWb1yy7H/RpjB+9I
ulsC7P3KLBjd1e6tn2SbmHCz3DJDlAPOYiP5WZ/ExDkPZvXgeHG7KwiYuv1w3iDC
djL3y9HgoMmRxkEdQVt5BYfIo9aa4iE5t44CLpY93KeiClvTSFcX3Zb2hZxVBVXM
v8XLwV17EOB0aqlBkThiSB2BlXTLNDK4oMKM1HHvhg+jYec8ZnnvWIVAiKs1Mefe
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321969103009287900435393209729018804097043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-28 13:36:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-28 13:36:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san1591.cdntwrk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27450346873714494311953611379396328664760145559590707836633050846778889725893630365046454339578836098804858774230164508133429529991891914666604883350810917148021781566808390632331909619121139816649479699789758225498672166649752515107858712370523749507643996602818569327000341127502393324178678284715776547338493750696155552168051027162646676850261000321629409299979269045613808654984283139724121505686590725615326385457599914771879005479559109950252206125695035619898690416628004061357286464126106599645662749776427438489981310505109651780503429391304304236373401111746580684473887459764092515307845880166790854073901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							885f7326be08488ed0cb41a069cd45719501b16c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1666 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.dynamicsignal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.booker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadianadvisoryboard.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.hubdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.snapapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.southwestsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ssp-worldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.insidegolfmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.irishgolfer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.macdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.meetinreykjavik.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.miamilivingmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.oceanhomemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.virtualmobiletechnologies.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epubs.aallnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flip.summitcat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcmresources.avanti.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi.iaq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub-en.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub-fr.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.bluetarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.content4demand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.pennwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.praxisvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.randallreillycustom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.retailtouchpoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.sxsw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideas.baudville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.looker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.randstadsourceright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.travelandtransport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.avanti.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cloudwords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.ovma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.cluttoncox.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.dmtmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.timesprintingdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcecenter.abilitynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.apriori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.auduboncompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.biznessapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.boaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.cloudwords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.datanyze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.dynamicsignal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.moredirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.pathguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1591.cdntwrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uberflip.westsidedigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewer.e-digitaledition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balharbourdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balharbourfloridaguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balharbourfloridaguidebrazil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balharbourfloridaguidelatinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balharbourfloridaguidemexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cultureddigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hub.camaf.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icloudmobilemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newlifestylesdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southbaydiggs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swppcdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topsnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultratravelusdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veniceftldigital.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000176a9c7e885000004030047304502201fa0d94c2104563b0fb5017e67b5388e28f0c392ca7a217a9c176ed47891c7c7022100e2bdd3a13a1e8826e2458e50ed905c760514ab2d8b7c964b0904a6c38b4cef340075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000176a9c7e8f90000040300463044022073d5f840e149bbd139a3dd638c390f529754075b287d9d5eb072adb7ceb0e2900220459314cde7f450663ba549603b377e143fff86e74bfc379e15b7515b3aa9582b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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