www.familienmagazin.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:16:0f:b8:b1:5c:9b:46:08:18:bd:7a:97:e4:0d:f3:0f:e8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.familienmagazin.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:0f:b8:b1:5c:9b:46:08:18:bd:7a:97:e4:0d:f3:0f:e8
Serial Number (int): 268843967267423675919666119308242020667368
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:1b:4a:41:25:ec:b8:fd:bc:d3:a8:d3:d3:41:4a:10:d2:e2:2c:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:37:83:2b:ce:ec:9d:08:10:03:18:19:3c:23:b9:a6:f7:ee:7a:c7
Fingerprint (sha256): 51:53:fd:dc:5f:ae:75:1b:2b:64:7c:1e:75:aa:38:f6:50:4b:c6:ff:3f:c4:0c:7a:f3:d5:54:cd:b1:83:ff:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.familienmagazin.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.familienmagazin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allostream.com
beckleydental.com
bigrigloan.com
butterfieldfarm.com
cannabisbin.com
cannci.com
centtall.com
chain-mail.com
cheapheathrowtaxi.com
corpuschrististemcell.com
eei.bible
etchlogic.com
etransporting.com
familienmagazin.com
flexom.com
fristonion.com
gichan.com
glptech.com
govring.com
hotelze.com
idgc.com
intellisym.com
lexadin.com
measlesprevention.com
muaythaibetting.com
naturalheavan.com
neecabe.com
newenglandwebhosting.com
nisafoundation.com
poisonivyremovalgeorgia.com
poisonivysurvivalguide.com
roatanvacation.com
sherrismith.com
siouxfallsjointpain.com
soappalled.com
spotting-scope.com
stabilitan.com
tallahasseejointpain.com
thegoddessboutique.com
thepajamagame.com
thesoftwareplace.com
trademarkbeacon.com
trendinn.com
tusrc.com
vapeaholic.com
virginiastemcell.com
virtualrealityfunnel.com
whispermate.com
www.allostream.com
www.beckleydental.com
www.bigrigloan.com
www.butterfieldfarm.com
www.cannabisbin.com
www.cannci.com
www.centtall.com
www.chain-mail.com
www.cheapheathrowtaxi.com
www.corpuschrististemcell.com
www.eei.bible
www.etchlogic.com
www.etransporting.com
www.familienmagazin.com
www.flexom.com
www.fristonion.com
www.gichan.com
www.glptech.com
www.govring.com
www.hotelze.com
www.idgc.com
www.intellisym.com
www.lexadin.com
www.measlesprevention.com
www.muaythaibetting.com
www.naturalheavan.com
www.neecabe.com
www.newenglandwebhosting.com
www.nisafoundation.com
www.poisonivyremovalgeorgia.com
www.poisonivysurvivalguide.com
www.roatanvacation.com
www.sherrismith.com
www.siouxfallsjointpain.com
www.soappalled.com
www.spotting-scope.com
www.stabilitan.com
www.tallahasseejointpain.com
www.thegoddessboutique.com
www.thepajamagame.com
www.thesoftwareplace.com
www.trademarkbeacon.com
www.trendinn.com
www.tusrc.com
www.vapeaholic.com
www.virginiastemcell.com
www.virtualrealityfunnel.com
www.whispermate.com
www.wyomingsnowmobile.com
www.xehotel.com
wyomingsnowmobile.com
xehotel.com

Other certificates including the domain name familienmagazin.com

(limited to 100 certificates)
nicetryfilm.com
www.renojointpain.com
stabilitan.com
www.nybank.co
familienmagazin.com
www.beckycloonan.com
www.hlvdrone.com
angusscrimm.com
www.sewarddental.com
poisonivysurvivalguide.com
www.familienmagazin.com
www.timothyhutton.com
www.nffco.com
familienmagazin.com
www.hotelesenriodejaneiro.com
www.dealzen.com
familienmagazin.com
www.vbcomingsoon.com
800003.com
familienmagazin.com
bastonciniaffumicati.com
insurancezone.co
onemillionmilebattery.com
123law.legal
stadiacomputing.com
www.prptallahassee.com
outbreakapparel.com

Certificate

The complete raw certificate details for www.familienmagazin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv6GMOgbblQ3Ck7ZxkhR
uVN6CqVJ5e2IuAc+s7UdsWyhhOH6/rRohi1PrR67MOU+KUBh1IFuQiVpuG8HJxaN
2oFhpgcRKX2i2FgebdjeUStPKbMlCOsPMnOc9PPW1m13YbTi1GxCBZyA1+zHN1GG
eVubL8i+6ASfE8rerXnsSZlSw5rdrzBei9QvPRFpWmKQL3W54kz8H7KCdnQ9Wl5w
n0i5eoP96olnvqUdefhstH+2VEJc9TIr4owwryC0Uj5uGXDWuLc++waNkzeM+bm3
/kGA0G+22Me43XnIK9nRRLemdtio+E0aTJ+GE6jj673gV/KHQWlrlYeSmtR2brJa
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268843967267423675919666119308242020667368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 19:14:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 19:14:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.familienmagazin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24110788496403853699233208890589202217453893247593213737109916109495538734010386429023269993493714165056528690876114795303549472624354769160196844468383213928597385385550110265374501843641461997289688691504174163537726294931886067694389087691135564390620253693509164068438673287139335182911399744010232757545053789533253747916033851507880262322235256359543888313790665452742345112390439020149750672960752998452918076014526532219977438040532441304727757543064305411741530682532221723804847636815719441468542325546122050324688379201027656901828697097756591318772704168198704368058928637290860175530904945198596042676811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							681b4a4125ecb8fdbcd3a8d3d3414a10d2e22c11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2028 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allostream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckleydental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigrigloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butterfieldfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chain-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapheathrowtaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschrististemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eei.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etchlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etransporting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familienmagazin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fristonion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gichan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glptech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idgc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intellisym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexadin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'measlesprevention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muaythaibetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalheavan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neecabe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newenglandwebhosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nisafoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyremovalgeorgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivysurvivalguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roatanvacation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherrismith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siouxfallsjointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soappalled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotting-scope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stabilitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tallahasseejointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegoddessboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepajamagame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesoftwareplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trademarkbeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tusrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vapeaholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginiastemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualrealityfunnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whispermate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allostream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckleydental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigrigloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butterfieldfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannabisbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chain-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapheathrowtaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschrististemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eei.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etchlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etransporting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.familienmagazin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fristonion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gichan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glptech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.govring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idgc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intellisym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexadin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.measlesprevention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muaythaibetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalheavan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neecabe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newenglandwebhosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nisafoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivyremovalgeorgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivysurvivalguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roatanvacation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sherrismith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siouxfallsjointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soappalled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spotting-scope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stabilitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tallahasseejointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegoddessboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thepajamagame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesoftwareplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trademarkbeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trendinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tusrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vapeaholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virginiastemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virtualrealityfunnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whispermate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomingsnowmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xehotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomingsnowmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xehotel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c259f45d30000040300473045022100d91fd305afd5b8d07dfec78d6f404ee2f41891b7dec669375f459e880ebf92410220219b7daa459eb985f44819d1bdc8db3601ed98ddf61549e5bbfc0358add8ec45007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c259f45c300000403004730450220652dd46ddb54816497a09239965ffd4139245bae2197bb164a32e2faa2a3c5aa022100b5a791b22cf9a3715b5ffdedd4b4e95099a95ac790f575f27d8059044021fd29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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