fixleg.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9d:76:16:c3:72:82:74:0a:b4:b4:11:b7:a4:02:8f:d6:47 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fixleg.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:76:16:c3:72:82:74:0a:b4:b4:11:b7:a4:02:8f:d6:47
Serial Number (int): 314918156500043843118762760205595065701959
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:e5:45:30:92:df:27:6c:b7:4f:85:aa:75:ed:56:fa:d4:30:45:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:e0:10:a1:92:e7:14:28:ea:2f:71:2f:1b:25:59:5d:41:1f:7c:e9
Fingerprint (sha256): 51:33:00:9b:45:a2:d4:88:a2:91:7b:62:20:59:d6:01:30:59:bb:ec:1e:eb:5c:31:e4:67:c3:77:94:4d:16:52

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fixleg.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fixleg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

100geburtstag.com
agustipuig.com
anotherfalseflag.com
asteriskconfig.com
asterisktag.com
bogusflag.com
brovig.com
coldpressedveg.com
creedblackflag.com
dersonntag.com
discoverkalamansig.com
dressag.com
dubaimoney.net
durschlag.com
employmentdg.com
fixleg.com
globalrig.com
gravityandswag.com
investrig.com
jackdurschlag.com
juicingveg.com
literarymag.com
livesexdrag.com
madisonatballstonstationag.com
madisonballstonstationag.com
martonschimcsig.com
morefalseflag.com
newfalseflag.com
privatebankingag.com
radiowinnipeg.com
realsexdrag.com
romanticwinnipeg.com
schimcsig.com
scubasportmag.com
semisubmersibleoilrig.com
semisubmersiblerig.com
sexdrag.com
shoporganicveg.com
teaminternetag.com
thatfalseflag.com
timesbg.com
tourwinnipeg.com
trygg.com
unitedarabemiratesflag.com
untrueflag.com
varig.com
wnhashtag.com
www.100geburtstag.com
www.agustipuig.com
www.anotherfalseflag.com
www.asteriskconfig.com
www.asterisktag.com
www.bogusflag.com
www.brovig.com
www.coldpressedveg.com
www.creedblackflag.com
www.dersonntag.com
www.discoverkalamansig.com
www.dressag.com
www.dubaimoney.net
www.durschlag.com
www.employmentdg.com
www.fixleg.com
www.globalrig.com
www.gravityandswag.com
www.investrig.com
www.jackdurschlag.com
www.juicingveg.com
www.literarymag.com
www.livesexdrag.com
www.madisonatballstonstationag.com
www.madisonballstonstationag.com
www.martonschimcsig.com
www.morefalseflag.com
www.newfalseflag.com
www.privatebankingag.com
www.radiowinnipeg.com
www.realsexdrag.com
www.romanticwinnipeg.com
www.schimcsig.com
www.scubasportmag.com
www.semisubmersibleoilrig.com
www.semisubmersiblerig.com
www.sexdrag.com
www.shoporganicveg.com
www.teaminternetag.com
www.thatfalseflag.com
www.timesbg.com
www.tourwinnipeg.com
www.trygg.com
www.unitedarabemiratesflag.com
www.untrueflag.com
www.varig.com
www.wnhashtag.com

Other certificates including the domain name fixleg.com

(limited to 100 certificates)
schimcsig.com
www.dersonntag.com
creedblackflag.com
www.dressag.com
www.trygg.com
teaminternetag.com
oilfinance.com
www.dubaimoney.net
www.unitedarabemiratesflag.com
dersonntag.com
fixleg.com
www.literarymag.com
privatebankingag.com
literarymag.com
teaminternetag.com
www.scubasportmag.com
www.securityfreelance.com
www.trygg.com
www.dubaimoney.net
investrig.com
dersonntag.com
www.scubasportmag.com
creedblackflag.com
fixleg.com
www.martonschimcsig.com
scrapfinance.com
www.dersonntag.com
www.literarymag.com
teaminternetag.com
brovig.com
www.shoporganicveg.com
www.creedblackflag.com
jackdurschlag.com
fixleg.com
creedblackflag.com
fixleg.com
madisonballstonstationag.com
creedblackflag.com
creedblackflag.com
scubasportmag.com
indonesiatradefinance.com
asteriskconfig.com
fixleg.com
www.securityfreelance.com
teaminternetag.com
scrapfinance.com
dersonntag.com
www.asteriskconfig.com
teaminternetag.com
www.trygg.com
scrapfinance.com
www.varig.com
www.timesbg.com
www.securityfreelance.com
fixleg.com

Certificate

The complete raw certificate details for fixleg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmaZFZDigjPbdpVdao6N
LsEfmWkdI34bbdpHpAhgAF7LDmo5Ghktia14U7qy0JqR+Omd5BD9SNPWE6TsFL3t
nBe+vasCY97SGW7QslgLPeQYlYmw05ZtkPz3RHNUSbbEydpaCaZjU8hCqcBIUu0M
g/kXM/frwPe1qI3ZZPRea9EtiWC5auU4mWkEVUTrqSsayub9ra+zx03tN7TOclPV
idPmqGYqk+Z5oCRSgANeb/aoMuVueanPIhTkYgE4vVART2HHjRIJHLTPVidC9ie+
UGiPgTFP5kuvBVlmrGb91/IqSgTqHTfVfNilfyBmVIxgiFO6Y/Jf+PdGxMrENALa
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314918156500043843118762760205595065701959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-30 10:56:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-28 10:56:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fixleg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22521011236145063653873208004748077105080960103918610564846089290785364612392080262115069775531249341165657919780116098214091580059362463826177164847875243910212825978214718115571020636022028462460345410255716058278086839994063179414454013368819951384917821694310803239765094436127591521178014601995759948242874411287299381870027011658800571458662158558816059944602425418088840854583817343606514418805691738338150488541164475948700905772106376904643265939937530129254533095277768750552446559972549872510299927172336452678879021560021662489997572485723356840781976507326125106602998852715146885679992625950489827269251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0e5453092df276cb74f85aa75ed56fad43045c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100geburtstag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agustipuig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anotherfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asteriskconfig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asterisktag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bogusflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brovig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coldpressedveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creedblackflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dersonntag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverkalamansig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dressag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaimoney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employmentdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravityandswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackdurschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicingveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literarymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livesexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonatballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martonschimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morefalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankingag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiowinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realsexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanticwinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scubasportmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semisubmersibleoilrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semisubmersiblerig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoporganicveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaminternetag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tourwinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trygg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedarabemiratesflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untrueflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnhashtag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.100geburtstag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agustipuig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anotherfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asteriskconfig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asterisktag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bogusflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brovig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coldpressedveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creedblackflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dersonntag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoverkalamansig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dressag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaimoney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employmentdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gravityandswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackdurschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juicingveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literarymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livesexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonatballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martonschimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morefalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankingag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiowinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realsexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romanticwinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scubasportmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semisubmersibleoilrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semisubmersiblerig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoporganicveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teaminternetag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thatfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tourwinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trygg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedarabemiratesflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.untrueflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wnhashtag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000163b0e834c10000040300473045022100ddc3bfea07dcd0fbf0a0d05f8a836cd7bd25bdd62216f926ad143c60eb19d6a002206a322bd1cf84b47ae79b0b94563a84880ca2e8344678ca1e151095eb83357084007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163b0e834a00000040300483046022100d92d725f897eeeb77050ba470486e9ede35d7e73badd4778d389156407f54fe4022100d20c2c25ba83ecba2d2c01143b0723027e6cbaea43edf6f1c8ac2a7e8b3aadc0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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