www.gaana.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:fa:b5:92:7b:1a:0f:e9:61:40:35:02:5d:90:cd:f2:ef was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gaana.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:fa:b5:92:7b:1a:0f:e9:61:40:35:02:5d:90:cd:f2:ef
Serial Number (int): 296719191363799957417272394760075084690159
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:3d:2f:15:76:ca:3c:6b:cb:ad:00:dc:78:4a:32:df:a0:32:94:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 68:92:18:15:28:d6:41:6a:01:22:04:fd:c4:76:19:c7:43:c8:05:67
Fingerprint (sha256): 4f:a2:59:d7:1b:b2:2e:c7:3d:86:25:67:69:0d:4c:bd:fc:9a:af:68:57:ab:9e:70:2a:28:59:f4:f8:aa:00:24

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.gaana.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gaana.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2rna.com
424leaf.com
arkansascannabisscience.com
artificiali.com
bendingbirch.com
carcote.com
cathydoll.com
complimentaryphysician.com
curatelafallimentare.com
d0nald.com
dystopedia.org
esportskaohsiung.com
gaana.org
hairreplacementforwomen.com
hideoutvpn.com
indianrealestate.mobi
ironawe.com
judybeck.com
lachiropractic.com
listingcapecoral.com
livemessage.com
medical-loan.com
mometasonefuroatecream.com
mosquitoebite.com
nesch.com
niarn.com
nosotros.org
panoraam.com
psychedelicshealth.com
regenerativemagazine.org
rollsroycerental.com
shyue.com
sighdell.com
siouxcityphysician.com
sleuthable.com
solar-radiation.com
sportsmedicinesaltlake.com
spottracking.com
studioselcouth.com
superiorsalestraining.com
tagliegrandi.com
tesgeel.com
tobaccystarterpack.com
toddlershouse.com
venturemonk.com
vitamincbdoil.com
wikileqks.org
windowreplacementmn.com
wise-world.com
wjlco.com
www.2rna.com
www.424leaf.com
www.arkansascannabisscience.com
www.artificiali.com
www.bendingbirch.com
www.carcote.com
www.cathydoll.com
www.complimentaryphysician.com
www.curatelafallimentare.com
www.d0nald.com
www.dystopedia.org
www.esportskaohsiung.com
www.gaana.org
www.hairreplacementforwomen.com
www.hideoutvpn.com
www.indianrealestate.mobi
www.ironawe.com
www.judybeck.com
www.lachiropractic.com
www.listingcapecoral.com
www.livemessage.com
www.medical-loan.com
www.mometasonefuroatecream.com
www.mosquitoebite.com
www.nesch.com
www.niarn.com
www.nosotros.org
www.panoraam.com
www.psychedelicshealth.com
www.regenerativemagazine.org
www.rollsroycerental.com
www.shyue.com
www.sighdell.com
www.siouxcityphysician.com
www.sleuthable.com
www.solar-radiation.com
www.sportsmedicinesaltlake.com
www.spottracking.com
www.studioselcouth.com
www.superiorsalestraining.com
www.tagliegrandi.com
www.tesgeel.com
www.tobaccystarterpack.com
www.toddlershouse.com
www.venturemonk.com
www.vitamincbdoil.com
www.wikileqks.org
www.windowreplacementmn.com
www.wise-world.com
www.wjlco.com

Other certificates including the domain name gaana.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gaana.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw58lRw4zYQBxXHSw8USl
CL7qDY1u8aN9mqtGXHYXnaFApsJtsaVC318yNAaGoMhSII5f/hbjbHpUG0Ltwf63
+5jCoA5t1Xv4GjDUo6I+mHg0fuc35VENnepnkIeglzgeSjvRe9hpu7f1JvHZDxSb
gGIqEp4wru/KllWG/0CCZmMtB8bLtYwjLowjhf314D8+8RlXYqzNKCu1BdGgbiY7
pDHOi9HLz/RTKKlXetLyWqcHqjFImzXvvHR1HthLP62B4T6lDfFke+hhPm9+hOjA
zBOm2VeB6ISuoKDBWX4QNkOjZo2nEPQXpdq5QbwLw9cVhyX+CBU5kP5SeDnGfVzd
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296719191363799957417272394760075084690159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 03:57:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 03:57:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gaana.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24694947096271157501153043364841569327634336381581659187920568853306449042217525022433054536256868484258577243556622947450084705138273362043248881095625856551070085077555534989334307768862041448970810514574997967214556440545688512655538754997159678285406206606209089933171902167209166263506585861758453566063732276363698075013363571279465200798438615912735324883998014628765430862945915574637668667075044451778072543241783453560344388352670263548595124610935143555885902111341077114371871367595463332473056631905262595583757215916403103203624054744155313853534179133194954637474932025802288168150288960689680122961169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							753d2f1576ca3c6bcbad00dc784a32dfa0329427
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2058 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2rna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '424leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansascannabisscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artificiali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bendingbirch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carcote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathydoll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'complimentaryphysician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curatelafallimentare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd0nald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dystopedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esportskaohsiung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairreplacementforwomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hideoutvpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianrealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironawe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judybeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lachiropractic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listingcapecoral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livemessage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical-loan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mometasonefuroatecream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosquitoebite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nosotros.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panoraam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychedelicshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regenerativemagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollsroycerental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shyue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sighdell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siouxcityphysician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleuthable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solar-radiation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinesaltlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spottracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioselcouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiorsalestraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagliegrandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesgeel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tobaccystarterpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toddlershouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturemonk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitamincbdoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikileqks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowreplacementmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wise-world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjlco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2rna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.424leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkansascannabisscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artificiali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bendingbirch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carcote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathydoll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.complimentaryphysician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curatelafallimentare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.d0nald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dystopedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esportskaohsiung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hairreplacementforwomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hideoutvpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianrealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ironawe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.judybeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lachiropractic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listingcapecoral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livemessage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medical-loan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mometasonefuroatecream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosquitoebite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nesch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nosotros.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panoraam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psychedelicshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regenerativemagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rollsroycerental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shyue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sighdell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siouxcityphysician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sleuthable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solar-radiation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinesaltlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spottracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studioselcouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superiorsalestraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tagliegrandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesgeel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tobaccystarterpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toddlershouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturemonk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitamincbdoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wikileqks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windowreplacementmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wise-world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wjlco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f4ade2e8b000004030046304402203e4c0ead0efad6f6ceab97dd4f06e441b7bd3c3d9be58c4890425e85591900f502200100b242bee821a239d0f2129d66326e2a17a635c72b615760a2f3a60b0e95bd00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f4ade2eb600000403004730450221008db982e414ebc881de1f911863641d989d344ec743be705cb320b5097374f875022046c4088a34344134159c6df6b743eb913d5c591d2792f08fdebb837907de9c56
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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