allfree.com.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:b3:48:f5:68:9b:b4:f8:97:8c:84:f7:b9:fb:61:c1:21 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=allfree.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:b3:48:f5:68:9b:b4:f8:97:8c:84:f7:b9:fb:61:c1:21
Serial Number (int): 320784300273621617784592971553003014308129
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:1f:7b:53:db:ee:7d:72:cf:e2:f7:95:5e:3d:cb:df:8e:93:4b:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:dd:9c:46:ad:b6:8e:a5:89:df:99:7e:02:63:22:ce:e4:73:6a:ba
Fingerprint (sha256): 50:24:a3:1b:55:d1:11:91:cd:8b:b4:a5:57:08:3c:eb:61:c2:19:a7:88:16:5e:bd:0a:79:4f:e0:c7:f4:ad:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate allfree.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for allfree.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adoptaapet.com
*.aetnabetterhealth.co
*.airarabia.co
*.allfree.com.au
*.bankmobilevibe.co
*.bidfta.co
*.broardschools.com
*.caseable.co
*.coastcaptalsavings.com
*.colarspace.com
*.coolmoviez.tv
*.dresslink.co
*.ecoatm.co
*.edwardjonnes.com
*.ethiopienairlines.com
*.eversoure.com
*.fakehub.co
*.fashoinmia.com
*.firstenergycorp.co
*.fohow.co
*.fsresidential.co
*.kenya-airway.com
*.kwikrewards.co
*.lordandtaylor.co
*.myschoolbucks.co
*.navicurepayments.co
*.nolo.co
*.priorityhealth.co
*.recolve.com
*.rushmorelm.co
*.selectblinds.co
*.spanx.co
*.stellaadot.com
*.stmath.co
*.teesprimg.com
*.thaicupod.com
*.totalwireless.co
*.ububanca.com
*.uchealth.co
*.visitbritanshop.com
*.wannone.com
*.windstream.co
*.worldoftruck.com
*.wwwchangehealthcare.com
*.wwwdigikey.com
*.wwwenchantedlearning.com
*.wwwthestudentroom.co.uk
*.xceleneergy.com
*.yoinvest.co.uk
*.zumiez.co
adoptaapet.com
aetnabetterhealth.co
airarabia.co
allfree.com.au
bankmobilevibe.co
bidfta.co
broardschools.com
caseable.co
coastcaptalsavings.com
colarspace.com
coolmoviez.tv
dresslink.co
ecoatm.co
edwardjonnes.com
ethiopienairlines.com
eversoure.com
fakehub.co
fashoinmia.com
firstenergycorp.co
fohow.co
fsresidential.co
kenya-airway.com
kwikrewards.co
lordandtaylor.co
myschoolbucks.co
navicurepayments.co
nolo.co
priorityhealth.co
recolve.com
rushmorelm.co
selectblinds.co
spanx.co
stellaadot.com
stmath.co
teesprimg.com
thaicupod.com
totalwireless.co
ububanca.com
uchealth.co
visitbritanshop.com
wannone.com
windstream.co
worldoftruck.com
wwwchangehealthcare.com
wwwdigikey.com
wwwenchantedlearning.com
wwwthestudentroom.co.uk
xceleneergy.com
yoinvest.co.uk
zumiez.co

Other certificates including the domain name allfree.com.au

(limited to 100 certificates)
bee88.net
allfree.com.au
abouttouchfootball.com.au
ashbrookhorseboxes.co.uk

Certificate

The complete raw certificate details for allfree.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAo5PzdpHR7XZIvucawQyF
IbT5+7l0Xx9+kFbFXHPXMEmuA0WiaYVOBkebpBR/G3M/K6UQmGL/lgB9BEkjeL1c
HOCffFmjiN42RzTvMat6x5O3YVQLxSjfylC39LoMqYuDKiFIk1WSe2N43HjcgZWr
qYCwDPM4BDMgCBnTj58PVqPnr+dU/w1QTyBfodYa+Q0vdmCHfORoSSoCPqG+gu8L
YE5jEdBU+p6uUZ5m7EC2+UwuXQhTVLfFEmN+w0ERnblbm1JSp92AW29x+sGqpZUy
rxhXT38/Pe4cjILB/bK7TbNMOA8rqO2JlELD8bv1oUOIfJYAK/sQo/c/QBamNlzu
fnPGOKfMtJEw53h9a/ioOtdL2z9gm8Yd+IZ5jLBwh3btpd7xnslnKKi37XbVGylf
eYwQc6CqEdhQ2H/6iHvJIWcByWxy3tmIIkSkryfzntR3CthPy/E6K7dan68fowYa
5X9tm6WDXM/QO2cZnFy6n0/kSJ0ohurZIHl0KFNUKdF2sUB2nSpP3oiH7hq9+3J1
b56pr6YpKik38S6JrY4PPpHoS0L4dAGXiHE1VIi/fjRmjLgV/UcewzQMHuszSY+W
IVCtDhrJC7Zo/IjQtYqeqmCjLfg1vx88hoqoKA/JkO5RpQ3oYDV/Nj/M+z4qbZOR
Zx5WisOUEMxVcqoQ/EN4Kg0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320784300273621617784592971553003014308129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 06:46:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-15 06:46:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'allfree.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 667339746890603439463169110081757913625343991873577356657009578368373985460247554300428366728188135103169055536779308862568745679527265267419645864730972093148295235949133708964903479688148062595463924037301178935685801167379371854227363494169919621595756938781408103621726201881961622783669008188840690361946683189329422996193331686765565952867284405874858327500350271358148147812334468469369736152553216157598076929973321125840664088620369162789209269877512307893066551746430667350046990128159148514294210988593733802027433309453069990377686625380557724618496246618624121010322280851229223037663554574401534006312303664321615678971086476737228139902614483929819879322065788744268542919983039605426806419267357331521628483999454578199169395963929947262118016907485864298019213923999589016573623659868846886682369004491703494299793697495554316633675375004039792596535712676610161874820524124445989381305466596039230183250783468219265595794652485068736510317559320538680934367028152122724529321434886001582245982538953258876845945566307671355874910447586032305917962140865511556929978766303788085108745948117153534777196806091211163156711166773009905415717891387750421999248144971996324434807735632555942849165381730696156237815884301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							571f7b53dbee7d72cfe2f7955e3dcbdf8e934b32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1746 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adoptaapet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aetnabetterhealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airarabia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allfree.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankmobilevibe.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bidfta.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broardschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caseable.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coastcaptalsavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colarspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coolmoviez.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dresslink.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecoatm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edwardjonnes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ethiopienairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eversoure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fakehub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashoinmia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstenergycorp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fohow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fsresidential.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kenya-airway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kwikrewards.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lordandtaylor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myschoolbucks.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.navicurepayments.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nolo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.priorityhealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recolve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rushmorelm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selectblinds.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spanx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stellaadot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stmath.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teesprimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thaicupod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalwireless.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ububanca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uchealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitbritanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wannone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windstream.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldoftruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwchangehealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwdigikey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwenchantedlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwthestudentroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xceleneergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yoinvest.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zumiez.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adoptaapet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetnabetterhealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airarabia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allfree.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankmobilevibe.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidfta.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broardschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caseable.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastcaptalsavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colarspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolmoviez.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dresslink.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecoatm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edwardjonnes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethiopienairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eversoure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fakehub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashoinmia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstenergycorp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fohow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsresidential.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenya-airway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwikrewards.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lordandtaylor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myschoolbucks.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navicurepayments.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nolo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priorityhealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recolve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rushmorelm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selectblinds.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellaadot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmath.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teesprimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaicupod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalwireless.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ububanca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbritanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wannone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windstream.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldoftruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwchangehealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdigikey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwenchantedlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwthestudentroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xceleneergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoinvest.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zumiez.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170e77566a9000004030046304402201406e35d42b70105551d23e19f17b2b97ec1bda2e4da7ceaf489e7235d1d632b022040d66a6e985258d6a7b24181eeafa25bfc11f3d4a5e44aad71371d38b15775bd007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e775689e0000040300473045022026f71b2cb329a89b323ddf632af2b0984bbf21e8616538f5e67edf8c0b2293d2022100a9e21624ed3b556a7e3c7af3fccf173e0a320ec1b4e487fbe26679ef6ec5c706
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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