magiccrayons.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:54:a0:8c:ae:ec:e6:b7:5e:1e:ca:9b:2e:37:19:8e:40:76 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magiccrayons.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:a0:8c:ae:ec:e6:b7:5e:1e:ca:9b:2e:37:19:8e:40:76
Serial Number (int): 290133983565433872905239156238230404087926
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:2a:2b:2b:a1:45:09:35:6f:3b:75:78:de:3b:31:bb:04:89:97:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5a:6a:91:a7:a0:4f:37:17:f0:89:78:1b:a2:f7:d8:e3:0d:08:89:87
Fingerprint (sha256): 52:8c:0d:3c:89:5e:af:96:ec:9b:4f:b0:3a:77:bd:d2:7d:fc:f9:d0:d6:09:a3:df:41:02:e0:0e:71:31:fe:80

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magiccrayons.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magiccrayons.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adventurejacket.com
*.autodecision.com
*.ballspinner.com
*.bleucafe.com
*.bloodcorp.com
*.chokeonmycock.com
*.circuitjet.com
*.creativitykits.com
*.dietshots.com
*.facialfree.com
*.fixmbr.com
*.flyingticket.com
*.fotoplan.com
*.free3danimations.com
*.freeadexchange.com
*.gndiamonds.com
*.hensai.com
*.icjet.com
*.iehotels.com
*.jacksonmi.com
*.magiccrayons.com
*.magicdate.com
*.magicdoor.com
*.newgox.com
*.noteworks.com
*.obituaryarchives.com
*.pinafore.com
*.poduszki.com
*.poloboy.com
*.powerrball.com
*.qrpo.com
*.quzzes.com
*.sexymoveis.com
*.soberville.com
*.stpeterford.com
*.sugarcookierecipes.com
*.sydneymate.com
*.tagbook.com
*.tallnet.com
*.thebabybin.com
*.thebeatlesshop.com
*.tushygirl.com
adventurejacket.com
autodecision.com
ballspinner.com
bleucafe.com
bloodcorp.com
chokeonmycock.com
circuitjet.com
creativitykits.com
dietshots.com
facialfree.com
fixmbr.com
flyingticket.com
fotoplan.com
free3danimations.com
freeadexchange.com
gndiamonds.com
hensai.com
icjet.com
iehotels.com
jacksonmi.com
magiccrayons.com
magicdate.com
magicdoor.com
newgox.com
noteworks.com
obituaryarchives.com
pinafore.com
poduszki.com
poloboy.com
powerrball.com
qrpo.com
quzzes.com
sexymoveis.com
soberville.com
stpeterford.com
sugarcookierecipes.com
sydneymate.com
tagbook.com
tallnet.com
thebabybin.com
thebeatlesshop.com
tushygirl.com

Other certificates including the domain name magiccrayons.com

(limited to 100 certificates)
mazdaauto.com
lightshoponline.com
magiccrayons.com
magiccrayons.com
magiccrayons.com
articstorm.com

Certificate

The complete raw certificate details for magiccrayons.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2pnpdmfbO5iHz5YnwgpX
C/RDGYPoJBGovkbAw3rOpgHexOV1rRwH1rMGO0enodIHAGmNBdxfMXOaaxG4PSsB
1hzkdCz9FbrmFQxf8e9bJ6OFK9zmCgvD9dNZ7C1PmStngPkL5XO+2VfGBPCKIHgM
Iijdv8UBTqPj5cWZCvtoA2r99QNFQBpHvOMgy4McE/5oVyfh3iaaj9gjv6wGrfC/
LKlNO9SY0hbwSmhSU2IYPXyWYkYvFxPAdQuxg1ygWSckJb9gEcYX1VqhUcs6vrjN
LikktNiMoTWRtF85AXDB//Vy+volAFiVBmW2Jm37LNjfN9iR4RicIv2yX+3/Gx3V
4xPtyDipD+iJUmo4IoYmTG8J/lIsYt3EXESfYKlOXxuHBO6RH4SeMj025xRshnnH
YPwPeyKuAmXP3m9z+0wMV3VbQMYHRZzZouRVmysFsmcrhbWnhpZULipwsm/Ko8O1
7nvKHHPtAADwOh8FcP1dBe1DycE80M5e//f4dh54PhnM/aCtU+wV6wFvHM+McXhp
scTNr+ZSsgfGdIoIBD7i5YzDM3Rhrsv2f6Is3uVDyMpJIgBTt0H/2UqqOXoS3aAr
jrECCcBX9yKJJ9gESMlWbPChoIAWOgUYScXEd+Q18WJKvan4f3UNyz8huBd2gba8
KLtDGXLiwJEeXDL/xAJbkXECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290133983565433872905239156238230404087926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 11:37:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 11:37:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magiccrayons.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 891815164745411952773560970678907677895813295174472338484865232438862703733063072563118778860221721524915234209710970578508759101496721714332963498805410570708091798272095178148233641694254649727677304249301406587232141856212179509219408636540511009415618680436113157131089210451814030011912775374555664887608882432346557998279719816795495460331995403381601534456513435724564894388200477721994608315664042754164361912170365398797845821277200081180414467783045868628359252457347782785720697278883731302518953647466380050011040622425979432959112935964233567752262131230862543190190059250382210049635813954089380725277906182972223186240127907096171865048510473341677253181670909285106423688256574538223846842375359582097017101068914976379583251583526105982865403629654706733962793439875073129077408595350741993883607775370575815605576230070193141190403504979662005153818029440652924454040993442860363919473225886357501632290695431868066194996067521941083670407596654385583015230396305089717258271205804300318761631848989114757130392717904304530965705229236265748459182221818123454300394145688878108503392679597724534370275241413258780189680751971966282809149342790241820364736774383311775269248075355640535238055942393843052695900623217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							462a2b2ba14509356f3b7578de3b31bb04899719
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1422 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventurejacket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autodecision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ballspinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bleucafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloodcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chokeonmycock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.circuitjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativitykits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dietshots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facialfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixmbr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyingticket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotoplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.free3danimations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeadexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gndiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hensai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacksonmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magiccrayons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magicdate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magicdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newgox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noteworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obituaryarchives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinafore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poduszki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poloboy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerrball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qrpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quzzes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexymoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soberville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stpeterford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sugarcookierecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sydneymate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tallnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebabybin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebeatlesshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tushygirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventurejacket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodecision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballspinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bleucafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloodcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chokeonmycock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circuitjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativitykits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dietshots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facialfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixmbr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingticket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotoplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'free3danimations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeadexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gndiamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hensai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksonmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magiccrayons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicdate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newgox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noteworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaryarchives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinafore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poduszki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poloboy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerrball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quzzes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexymoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soberville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarcookierecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneymate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tallnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebabybin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebeatlesshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tushygirl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016905c2ffe200000403004730450221009958a556d25475ef03c5438f33d8eda0e2a9f5607e86c93ebafdd85e4ce4a1b002206628369c423af306d54c203898c2a95e69697e77e4a63f74c021c11fed50d539007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016905c2fe3a00000403004630440220018f9a76ffd81724ec7d7a79d5387b8948471d1ee8e75d302ea353ded88b4bcb02201b4903600bf46e886e374d86a47addcd377d291edf95a9976cfde86aae822b39
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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