cuffusa.org

Issued by R11

About this certificate

This digital certificate with serial number 03:44:7d:2b:fd:64:83:ae:f1:46:a0:7f:8d:33:4e:ab:71:52 was issued on by Let's Encrypt.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cuffusa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:44:7d:2b:fd:64:83:ae:f1:46:a0:7f:8d:33:4e:ab:71:52
Serial Number (int): 284642440653555786941153594248687518445906
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:6f:d2:90:ed:2f:79:d7:37:f7:01:39:1a:47:a3:7f:1a:3e:1b:a3
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): ca:be:fc:96:e1:0a:9d:72:a7:ba:69:05:ec:b8:d3:22:68:e7:d5:fc
Fingerprint (sha256): 55:53:b8:af:d5:42:f4:4d:54:66:e6:a3:f3:44:49:74:2c:55:90:97:ff:27:d1:c6:19:c1:9e:08:aa:a9:42:f9

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate cuffusa.org

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cuffusa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

50statesrunning.com
affiliatemarketingfordummies.com
airmarshallsenvironmental.com
aplacetorecycle.info
arbitrage.domains
arbitragepodcast.com
arihanth.in
atlanticsounds.com
autocrusin.com
badboybobby.com
bestuniversityusa.com
boltup.net
buckeye-tv.com
burrow.info
businessfunding.partners
butlerchiropractor.com
bybit.thrive.fi
cerebrex.com
charlotterealtor.net
chiarulli.org
chocolatebarsreimagined.com
cleansugarpolicy.com
cliquebids.com
containerbuildings.net
crossfitdexter.com
cuffusa.org
do-example.com
downnderby.com
dyehardprints.com
energytransitionaccelerator.com
everythingbouttechnology.com
genitalautonomymovement.com
googlereview.charlottefirewood.com
graphicdesignsuite.com
guidetoprivateschools.com
hikingsf.com
houstontexasremodeling.com
internationalgeography.com
ionnanoglasses.com
jaredcummingsvideo.net
justdeath.com
kibbeonliberty.us
knightsoflasalette.org
krowdkontrolrecords.com
mancoons.com
matthewjboothpc.net
metaverse360degree.com
neighbzz.com
oceanfairwinds.com
ohdivorce.com
oraclum.info
promess.mx
questassist.com
restprint.com
rxsugardogsnacks.com
rxsugarworldwide.com
rxsugarzerosugarcereal.com
saintflanagan.info
sangabrielmassage.com
sellyourhomefor1dollar.com
shurakano.com
sleeeeeenky.com
stainlessbodyjewellery.com
sugardetox.angietaylorfairygodmentor.com
tampa-tv.com
taxrelieflawyer.com
texasgals.com
tgirl.toys
thebannernetwork.com
thenethackers.com
ukvisaappeal.com
vaginalsteam.com
valleywealthllc.com
vietseattle.net
whitwell.net
wildhalibut.com
wrenshall.com
www.conv.ai
wwwmerriam-webster.com
xn--noa.com
yinyangtheory.net
zachariah.com

Other certificates including the domain name cuffusa.org

(limited to 100 certificates)
myth.vc
cuffusa.org
cuffusa.org
cuffusa.org
cuffusa.org
tksimplex.cc
modalatmaintowns.ca
everythingdigitalworld.com.cuffusa.org
enerpactoolsgroup.asia
shop.gutrad.de
cuffusa.org
christmaslightoutlet.com.cuffusa.org
hardenburgh.com.cuffusa.org
defiantprep.life
cuffusa.org

Certificate

The complete raw certificate details for cuffusa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILYjCCCkqgAwIBAgISA0R9K/1kg67xRqB/jTNOq3FSMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjQwNjA3MDkwMDMzWhcNMjQwOTA1MDkwMDMyWjAWMRQwEgYDVQQD
EwtjdWZmdXNhLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMQ8
e6UdxB7fvSuy3hrqd3PxNHY/nsWtzXkZJl37oOglVfiMjU8CLmhSVJnNmCmpBQrM
b2e4TQ9ofZf8zfnPvEHAP3AY8Mf0ScZMra2NUFjj+Lg5Js0q0DxDWxyEYTP6E4t5
XUaSd1TcUND0r5HeXXOlvfSIUQt7e0z+DmieBLPb04TYVdtZhmu/H84xtK545zhR
V17EoSc0g6TeaBLhZLNyD8fDKeOf3hnxQ0baSDIdjApa7XFNY36LwWhqUbZmUN3R
KbNjEeyFlUpdS+5nt5z8e1M9G3B1Xd+YweGWF/mr/DETXTUsc15raqFege9y+j5X
15EEXtAx1OgDVkIA+D8CAwEAAaOCCIswggiHMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUqm/SkO0vedc39wE5Gkejfxo+G6MwHwYDVR0jBBgwFoAUxc9GpOr0w8B6bJXE
LbBeki8m47kwVwYIKwYBBQUHAQEESzBJMCIGCCsGAQUFBzABhhZodHRwOi8vcjEx
Lm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAChhdodHRwOi8vcjExLmkubGVuY3Iub3Jn
LzCCBo8GA1UdEQSCBoYwggaCghM1MHN0YXRlc3J1bm5pbmcuY29tgiBhZmZpbGlh
dGVtYXJrZXRpbmdmb3JkdW1taWVzLmNvbYIdYWlybWFyc2hhbGxzZW52aXJvbm1l
bnRhbC5jb22CFGFwbGFjZXRvcmVjeWNsZS5pbmZvghFhcmJpdHJhZ2UuZG9tYWlu
c4IUYXJiaXRyYWdlcG9kY2FzdC5jb22CC2FyaWhhbnRoLmlughJhdGxhbnRpY3Nv
dW5kcy5jb22CDmF1dG9jcnVzaW4uY29tgg9iYWRib3lib2JieS5jb22CFWJlc3R1
bml2ZXJzaXR5dXNhLmNvbYIKYm9sdHVwLm5ldIIOYnVja2V5ZS10di5jb22CC2J1
cnJvdy5pbmZvghhidXNpbmVzc2Z1bmRpbmcucGFydG5lcnOCFmJ1dGxlcmNoaXJv
cHJhY3Rvci5jb22CD2J5Yml0LnRocml2ZS5maYIMY2VyZWJyZXguY29tghRjaGFy
bG90dGVyZWFsdG9yLm5ldIINY2hpYXJ1bGxpLm9yZ4IbY2hvY29sYXRlYmFyc3Jl
aW1hZ2luZWQuY29tghRjbGVhbnN1Z2FycG9saWN5LmNvbYIOY2xpcXVlYmlkcy5j
b22CFmNvbnRhaW5lcmJ1aWxkaW5ncy5uZXSCEmNyb3NzZml0ZGV4dGVyLmNvbYIL
Y3VmZnVzYS5vcmeCDmRvLWV4YW1wbGUuY29tgg5kb3dubmRlcmJ5LmNvbYIRZHll
aGFyZHByaW50cy5jb22CH2VuZXJneXRyYW5zaXRpb25hY2NlbGVyYXRvci5jb22C
HGV2ZXJ5dGhpbmdib3V0dGVjaG5vbG9neS5jb22CG2dlbml0YWxhdXRvbm9teW1v
dmVtZW50LmNvbYIiZ29vZ2xlcmV2aWV3LmNoYXJsb3R0ZWZpcmV3b29kLmNvbYIW
Z3JhcGhpY2Rlc2lnbnN1aXRlLmNvbYIZZ3VpZGV0b3ByaXZhdGVzY2hvb2xzLmNv
bYIMaGlraW5nc2YuY29tghpob3VzdG9udGV4YXNyZW1vZGVsaW5nLmNvbYIaaW50
ZXJuYXRpb25hbGdlb2dyYXBoeS5jb22CEmlvbm5hbm9nbGFzc2VzLmNvbYIWamFy
ZWRjdW1taW5nc3ZpZGVvLm5ldIINanVzdGRlYXRoLmNvbYIRa2liYmVvbmxpYmVy
dHkudXOCFmtuaWdodHNvZmxhc2FsZXR0ZS5vcmeCF2tyb3dka29udHJvbHJlY29y
ZHMuY29tggxtYW5jb29ucy5jb22CE21hdHRoZXdqYm9vdGhwYy5uZXSCFm1ldGF2
ZXJzZTM2MGRlZ3JlZS5jb22CDG5laWdoYnp6LmNvbYISb2NlYW5mYWlyd2luZHMu
Y29tgg1vaGRpdm9yY2UuY29tggxvcmFjbHVtLmluZm+CCnByb21lc3MubXiCD3F1
ZXN0YXNzaXN0LmNvbYINcmVzdHByaW50LmNvbYIUcnhzdWdhcmRvZ3NuYWNrcy5j
b22CFHJ4c3VnYXJ3b3JsZHdpZGUuY29tghpyeHN1Z2FyemVyb3N1Z2FyY2VyZWFs
LmNvbYISc2FpbnRmbGFuYWdhbi5pbmZvghVzYW5nYWJyaWVsbWFzc2FnZS5jb22C
GnNlbGx5b3VyaG9tZWZvcjFkb2xsYXIuY29tgg1zaHVyYWthbm8uY29tgg9zbGVl
ZWVlZW5reS5jb22CGnN0YWlubGVzc2JvZHlqZXdlbGxlcnkuY29tgihzdWdhcmRl
dG94LmFuZ2lldGF5bG9yZmFpcnlnb2RtZW50b3IuY29tggx0YW1wYS10di5jb22C
E3RheHJlbGllZmxhd3llci5jb22CDXRleGFzZ2Fscy5jb22CCnRnaXJsLnRveXOC
FHRoZWJhbm5lcm5ldHdvcmsuY29tghF0aGVuZXRoYWNrZXJzLmNvbYIQdWt2aXNh
YXBwZWFsLmNvbYIQdmFnaW5hbHN0ZWFtLmNvbYITdmFsbGV5d2VhbHRobGxjLmNv
bYIPdmlldHNlYXR0bGUubmV0ggx3aGl0d2VsbC5uZXSCD3dpbGRoYWxpYnV0LmNv
bYINd3JlbnNoYWxsLmNvbYILd3d3LmNvbnYuYWmCFnd3d21lcnJpYW0td2Vic3Rl
ci5jb22CC3huLS1ub2EuY29tghF5aW55YW5ndGhlb3J5Lm5ldIINemFjaGFyaWFo
LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA
8QB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABj/IkkBsAAAQD
AEcwRQIhAIkcjxWED4s7QEU2G9KUL8pNXDmhysCIrULsCMb3hwnFAiAWJsmgA7Po
mUfTpOvO9UcnxTmYCHy4Eh1Sw0Z/LY83PwB3ABmYEHEJ8NZSLjCA0p4/ZLuDbijM
+Q9Sju7fzko/FrTKAAABj/IkkCwAAAQDAEgwRgIhAML/+c1JL2Xf8iZy6BBlSpkg
i0js2Yel+UKLbR1xcmtmAiEA99PoB6mOjrhHbfQxvh9a4qBbXKk2NwlxCm2nqg6N
MBAwDQYJKoZIhvcNAQELBQADggEBAEvV/IEo+5XB6PF+2haZ4FZGiCS/FuoOOrdJ
zz+0y2LfK698L6xQdo/XTc7n++oTenfKrTB9V8v38BBf0kjaAZAueiIs71zk7g6n
8EDAFNVAKRrJXHEwhmJL2NzVGwJhwwSI0OjVD8xi0JT9JQEls155a8zjxIuWe2v9
AhbbAIQZwdB7NaV6GSLNc7WiK3Kh04bmOtibH1qqi+lV5+qJM5fZd6XWL0G5nPnd
vvrZHChoE2o1hNvdgX9vkghNyXQ/Hrer3N9/jZBhHWDnkxcibHLCkzkEG3imBhyg
zDnrm4ZWTFK2kah9p4lmvPBjAyL0rRjl7nxbhsmAqsoZ0x3J2n4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDx7pR3EHt+9K7LeGup3
c/E0dj+exa3NeRkmXfug6CVV+IyNTwIuaFJUmc2YKakFCsxvZ7hND2h9l/zN+c+8
QcA/cBjwx/RJxkytrY1QWOP4uDkmzSrQPENbHIRhM/oTi3ldRpJ3VNxQ0PSvkd5d
c6W99IhRC3t7TP4OaJ4Es9vThNhV21mGa78fzjG0rnjnOFFXXsShJzSDpN5oEuFk
s3IPx8Mp45/eGfFDRtpIMh2MClrtcU1jfovBaGpRtmZQ3dEps2MR7IWVSl1L7me3
nPx7Uz0bcHVd35jB4ZYX+av8MRNdNSxzXmtqoV6B73L6PlfXkQRe0DHU6ANWQgD4
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284642440653555786941153594248687518445906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 09:00:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 09:00:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cuffusa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24772533046444089351346105856111463129330642992253769816716881356528946343134140815100804620030555554780840324727660318053133663846721834157781558966304854880556586387228658145035285424690037740870132328405756284691507755083827432103247791460380134968213912427246366075559739789288670986804764523962853515047287711598960924601151850153948001016806863121171098898589188804184995075747184685731468714597984182031028044479852967339823897352827468882703796960627137989399078890202050043858926621617187172610551199890757096338946274054651720012514551089878428794916310862816952917568818834530980830469014639880297938745407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa6fd290ed2f79d737f701391a47a37f1a3e1ba3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1670 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50statesrunning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliatemarketingfordummies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airmarshallsenvironmental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aplacetorecycle.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage.domains'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arihanth.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticsounds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocrusin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badboybobby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestuniversityusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boltup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buckeye-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burrow.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessfunding.partners'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butlerchiropractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bybit.thrive.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerebrex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlotterealtor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiarulli.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocolatebarsreimagined.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleansugarpolicy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliquebids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'containerbuildings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossfitdexter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuffusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'do-example.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downnderby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyehardprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energytransitionaccelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everythingbouttechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genitalautonomymovement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlereview.charlottefirewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphicdesignsuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidetoprivateschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hikingsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstontexasremodeling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalgeography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionnanoglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaredcummingsvideo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justdeath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibbeonliberty.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knightsoflasalette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krowdkontrolrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mancoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthewjboothpc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaverse360degree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighbzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanfairwinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohdivorce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oraclum.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promess.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questassist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugardogsnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarzerosugarcereal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintflanagan.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangabrielmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellyourhomefor1dollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shurakano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleeeeeenky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stainlessbodyjewellery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugardetox.angietaylorfairygodmentor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tampa-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxrelieflawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasgals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgirl.toys'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebannernetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenethackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukvisaappeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaginalsteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleywealthllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietseattle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitwell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildhalibut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrenshall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conv.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmerriam-webster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--noa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yinyangtheory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zachariah.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff224901b0000040300473045022100891c8f15840f8b3b4045361bd2942fca4d5c39a1cac088ad42ec08c6f78709c502201626c9a003b3e89947d3a4ebcef54727c53998087cb8121d52c3467f2d8f373f0077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ff224902c0000040300483046022100c2fff9cd492f65dff22672e810654a99208b48ecd987a5f9428b6d1d71726b66022100f7d3e807a98e8eb8476df431be1f5ae2a05b5ca9363709710a6da7aa0e8d3010
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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