www.ruffing.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5b:21:8e:ab:3d:1a:5e:38:da:66:20:02:aa:07:85:5d:54 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ruffing.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:21:8e:ab:3d:1a:5e:38:da:66:20:02:aa:07:85:5d:54
Serial Number (int): 292347158488234074939937302715961543318868
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 80:40:96:8d:e6:4a:48:31:cb:f5:1a:56:56:7b:61:5f:66:26:8f:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:15:77:6f:e0:d0:b5:fc:a7:11:86:cf:30:f3:58:d1:ce:17:fd:79
Fingerprint (sha256): 50:34:e5:ba:1c:ea:9d:ea:46:5b:25:56:af:1a:ce:6b:fa:ff:d3:d2:ea:2b:9e:9d:f4:33:e2:9f:e1:ad:78:02

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ruffing.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ruffing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aberfund.com
acke.com
alpineadventureromania.com
aramelo.com
aromonia.com
aviartech.com
bettingpa.com
billiger-flug.com
blockchaining24.com
budkid.com
cartercountymuseum.com
carynorman.com
columbiapaonline.com
compromatkz.wiki
corporategiftidea.com
dentonflooring.com
desmoinesstemcell.com
digitalstove.com
eightoneseven.com
encorona.com
firstcallone.com
flightsimulatorjoystick.com
foldabledesk.com
forge.bible
green-hybrid.com
hawkeyed.com
hijabestore.com
houstonhomeremodel.com
image-inc.com
insiderindexfund.com
insta-cam.com
itsalwayschristmascafe.com
masoleum.com
mechabitcoin.com
mobilepersonaltraining.com
mopar-forum.com
mozartmusichouse.com
nzwfd.com
ogglio.com
onenterprise.com
orangeingenieria.com
organicbklyn.com
publish.bible
rttreeservice.com
ruffing.com
scratchoffonline.com
sighhighnation.com
tajol.com
trcard.com
wussi.com
www.aberfund.com
www.acke.com
www.alpineadventureromania.com
www.aramelo.com
www.aromonia.com
www.aviartech.com
www.bettingpa.com
www.billiger-flug.com
www.blockchaining24.com
www.budkid.com
www.cartercountymuseum.com
www.carynorman.com
www.columbiapaonline.com
www.compromatkz.wiki
www.corporategiftidea.com
www.dentonflooring.com
www.desmoinesstemcell.com
www.digitalstove.com
www.eightoneseven.com
www.encorona.com
www.firstcallone.com
www.flightsimulatorjoystick.com
www.foldabledesk.com
www.forge.bible
www.green-hybrid.com
www.hawkeyed.com
www.hijabestore.com
www.houstonhomeremodel.com
www.image-inc.com
www.insiderindexfund.com
www.insta-cam.com
www.itsalwayschristmascafe.com
www.masoleum.com
www.mechabitcoin.com
www.mobilepersonaltraining.com
www.mopar-forum.com
www.mozartmusichouse.com
www.nzwfd.com
www.ogglio.com
www.onenterprise.com
www.orangeingenieria.com
www.organicbklyn.com
www.publish.bible
www.rttreeservice.com
www.ruffing.com
www.scratchoffonline.com
www.sighhighnation.com
www.tajol.com
www.trcard.com
www.wussi.com

Other certificates including the domain name ruffing.com

(limited to 100 certificates)
ruffing.com
www.financesavant.com
www.ruffing.com
ruffing.com
bernuydrivingschool.com
semiremolques.com
mycubby.com

Certificate

The complete raw certificate details for www.ruffing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yrAXN/jHfqdGz+q9Now
wAwMCshx+SxlgZDwv3TVNDAG6LGVHX0/NjBR0TsDFaLAwsH6zVchMeaNP69mlBr8
vg5e7nM1uslptk1hdKAJBY5KQfGKByasEO/hikp7oiD2lz4Zo82HiXZJiYO3y7af
L9/8Bcb4DsC29URb3Bsutd3O6OGUMfasan67CI9Q8Vlcd5eb0LlJLzM3C7iD+ltg
dw0tIDU6Q9X61okL/of51yCB5PLKF8JHLCpOYWOMeXzzaNMgrh/YCKliiAcMT3Xg
+VX1q2YiXqZcOJCwT5nRg60ziaUcqcpZR8kPqsLna82ftKZuhn1V8Z780BjlJ1+t
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292347158488234074939937302715961543318868
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 16:34:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-26 16:34:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ruffing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26657363857355285924947204005408324308101852241623463194573716099876160680116434276243855263985448681143288968344288585633794651113633468265001194727917041448047240127035368697452481126969204483990887722393198619727051309918708804097538747514227005022315829885375461784670960546157452687335138507639548083363254970644987775696275069677528600381255540180071227272689070543977149112831964116080550158444339118128770681290559886402695278496847551768588156815739305652262207920144562020634961001206212489733295456793966655563755926172816014268692029651761197882361825994965741530686954023452956673659882473081700062571787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8040968de64a4831cbf51a56567b615f66268f6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1988 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpineadventureromania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aramelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aromonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviartech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettingpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billiger-flug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchaining24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budkid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartercountymuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carynorman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiapaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compromatkz.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporategiftidea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentonflooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desmoinesstemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eightoneseven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encorona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstcallone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightsimulatorjoystick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foldabledesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forge.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green-hybrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkeyed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hijabestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonhomeremodel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insiderindexfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insta-cam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsalwayschristmascafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masoleum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechabitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilepersonaltraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mopar-forum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozartmusichouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzwfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangeingenieria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicbklyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rttreeservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruffing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scratchoffonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sighhighnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tajol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wussi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aberfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpineadventureromania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aramelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aromonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviartech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettingpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billiger-flug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchaining24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budkid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartercountymuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carynorman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiapaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compromatkz.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporategiftidea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentonflooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desmoinesstemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalstove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eightoneseven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encorona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstcallone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flightsimulatorjoystick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foldabledesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forge.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.green-hybrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkeyed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hijabestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houstonhomeremodel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.image-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insiderindexfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insta-cam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itsalwayschristmascafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masoleum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mechabitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobilepersonaltraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mopar-forum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mozartmusichouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzwfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orangeingenieria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicbklyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publish.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rttreeservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruffing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scratchoffonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sighhighnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tajol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wussi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fe81185fc000004030046304402202e75dd6e0574a3df3e0b4c93bb7ca0bdf7a0fd8e66e38dc6104ce8e546105a6f022076c8f45504331df85529d04f12ed36a9293776237586778d812ce91adf4ca05600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fe81186240000040300463044022063bcee8090fba9c1846357134caf368d876cf26793b11e164e2dad8f6b3d9954022016d316f118197b9a2663139f435cf2a216bc7ef1ea8750b7936b4532e9cd88f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00524493b37aa62cd6c213ee9f7e8767b769a395e7944a85f62972dd448dd9520092e27731839f0bb65f6baa94fb9d2bc7c4ae6906d2c3ea115a6c385afaaaea6cc7d69d155579e42a99d0d14c0bcdb342f518fe7d95fd0fc3ed7a3b01f03fd6a5f17b054f2698f9f17f9c02becaf0dfe0a6c8f589d66ba3e9d08add4de123e982cd3c0bb03735d6e9acdf79cb6fad10e880a605be1b3905559c2669b473882479c124a5eff025d43e78f23a4676530731fa37f3e02902bc16cf2716ac63189f0728cadb5fe6b76f93713e2e56a21b39e97044bb7976117af1f9afdfca984ea4b276fee3b8f056c189e514206c8f8208fbc8c128c188f4dc7b9210e32b9f7f0968