*.kalliopi-tsiknia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ec:a4:fa:f8:fd:84:fb:54:bd:b8:6f:73:1e:45:33:d2:6c was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.kalliopi-tsiknia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:a4:fa:f8:fd:84:fb:54:bd:b8:6f:73:1e:45:33:d2:6c
Serial Number (int): 428975078836029286557494154875656232751724
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d3:12:14:d4:31:f7:22:95:a5:ae:d3:1c:31:e4:5a:b0:6c:da:b3:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:a3:37:1a:94:80:b6:a7:61:7c:79:71:f9:99:b4:92:af:08:58:d7
Fingerprint (sha256): 56:10:88:91:ed:cf:93:81:b3:c2:72:a3:b8:98:88:59:f2:8a:19:9f:02:98:c6:42:a7:7b:df:f1:45:6a:d2:d5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.kalliopi-tsiknia.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kalliopi-tsiknia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.allancrain.com
*.artbymareena.com
*.backyardsbeautifulwhb.com
*.berwickag.net
*.bluepencilists.com
*.buycigarettesonline.us
*.carolinaviking.com
*.cascadehouseworks.com
*.cocktailcommunity.com
*.consolidatedcustomcarpentry.com
*.cornerstonegeneralcontractor.com
*.deltabilly.com
*.eatdrinkscience.com
*.fearandsporting.com
*.foxsquirrelcornmaze.com
*.guygardnercolonwarrior.com
*.hairconnection.net
*.hernanmedialaw.com
*.hhcolederm.com
*.iajgs2016.com
*.iajgs2016.org
*.iajgs2017.com
*.iajgs2017.org
*.indeeph2o.com
*.insideamericansoccer.com
*.kalliopi-tsiknia.com
*.kingofkingslowell.com
*.lionslair.com
*.loseweightminnesota.com
*.lrdennis.com
*.myuntv.com
*.retelux.com
*.saa-gcrig.org
*.sgvfood.com
*.silurianpharma.com
*.simonihay.com
*.sisaacs.com
*.skewereddreams.com
*.taylorsultimate.com
*.techbuiltconstruction.com
*.themiddlelifepodcast.com
*.themidwestshootout.com
*.timbrelarts.com
*.toiye.com
*.toysplusauctions.com
*.trusttrailfest.com
*.williamlhahn.com
*.wolfmanmerch.com
allancrain.com
artbymareena.com
backyardsbeautifulwhb.com
berwickag.net
bluepencilists.com
buycigarettesonline.us
carolinaviking.com
cascadehouseworks.com
cocktailcommunity.com
consolidatedcustomcarpentry.com
cornerstonegeneralcontractor.com
deltabilly.com
eatdrinkscience.com
fearandsporting.com
foxsquirrelcornmaze.com
guygardnercolonwarrior.com
hairconnection.net
hernanmedialaw.com
hhcolederm.com
iajgs2016.com
iajgs2016.org
iajgs2017.com
iajgs2017.org
indeeph2o.com
insideamericansoccer.com
kalliopi-tsiknia.com
kingofkingslowell.com
lionslair.com
loseweightminnesota.com
lrdennis.com
myuntv.com
retelux.com
saa-gcrig.org
sgvfood.com
silurianpharma.com
simonihay.com
sisaacs.com
skewereddreams.com
taylorsultimate.com
techbuiltconstruction.com
themiddlelifepodcast.com
themidwestshootout.com
timbrelarts.com
toiye.com
toysplusauctions.com
trusttrailfest.com
williamlhahn.com
wolfmanmerch.com

Other certificates including the domain name kalliopi-tsiknia.com

(limited to 100 certificates)
web14.tigertech.info
*.samanthaashleyviolette.com
*.homewithmykings.com
*.samanthaashleyviolette.com
*.kalliopi-tsiknia.com
*.mrsdizzie.com
web14.tigertech.info
web14.tigertech.info
*.kansascityjugglingclub.com
web14.tigertech.info
*.trenders-co.com
web14.tigertech.info
*.samanthaashleyviolette.com
web14.tigertech.info
*.ayenako.org
*.trenders-co.com
*.myblauto.com
web14.tigertech.info
*.mercergodier.com
*.riderpilates.com
*.realmadridfcnews.com
*.talkingsports.co.uk

Certificate

The complete raw certificate details for *.kalliopi-tsiknia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCN90E1mXty09N/kLlPV
aiUXPxOYBpDIf1g7vaRu8OWHHS9psiHslcL1IH3K6BksddyIRdkFGgHhOpVz7Q2K
36ZJ08RNAHDhB1EgfEE3ocrtEUsQyvPLw9I3MBnFWtto6bKgD+1VpSz2y8w85cR7
aje2hBmgBzYIucQxoRqHFSGOSgH7Uv1eWr1LIDHU3VZ4ABNqIk5ae/p2MX3VE0Pb
JnlmGrZGt9P4VuZuTGsc9C7yomU/3gO528c7Nc9gPeg05Pqibb1uyAcyIicb30Fr
riKrWtKmqoMMtfRfxgKmc0Af7TAON8ZGaynNU8Ar79BAfESouVtbTugydJ9IAYab
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428975078836029286557494154875656232751724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-04 10:12:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-03 10:12:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kalliopi-tsiknia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21730489945225475147237775676369299776568159368139663381186447957947648001387043440994505622689379476781034145605174562412671258366001149654594648577663952920069494163582440725994536306413419343503358462467076842219814996174206571137409493387190466553258483727781663268480481690473802662122380057311135815954365569741876446387754820237591159602718713336865537533050194019554275099288642918480994886653857211258484345190307797220165154041637338034546721922889734745674574679110460776321320411850755404840620979348477137068669796049262830980304186507272568974533918345682992527001762287446993799557049102688908579609399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:19|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1990 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allancrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artbymareena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backyardsbeautifulwhb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berwickag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluepencilists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buycigarettesonline.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carolinaviking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cascadehouseworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocktailcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consolidatedcustomcarpentry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cornerstonegeneralcontractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deltabilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatdrinkscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fearandsporting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxsquirrelcornmaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guygardnercolonwarrior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairconnection.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hernanmedialaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hhcolederm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iajgs2016.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iajgs2016.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iajgs2017.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iajgs2017.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indeeph2o.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insideamericansoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalliopi-tsiknia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingofkingslowell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lionslair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loseweightminnesota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lrdennis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myuntv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retelux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saa-gcrig.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sgvfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silurianpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simonihay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sisaacs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skewereddreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taylorsultimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techbuiltconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themiddlelifepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themidwestshootout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timbrelarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toiye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toysplusauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trusttrailfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.williamlhahn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolfmanmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allancrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artbymareena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backyardsbeautifulwhb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berwickag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluepencilists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buycigarettesonline.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinaviking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cascadehouseworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocktailcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consolidatedcustomcarpentry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornerstonegeneralcontractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltabilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatdrinkscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fearandsporting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxsquirrelcornmaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guygardnercolonwarrior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairconnection.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hernanmedialaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhcolederm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iajgs2016.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iajgs2016.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iajgs2017.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iajgs2017.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indeeph2o.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insideamericansoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalliopi-tsiknia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingofkingslowell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionslair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loseweightminnesota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrdennis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myuntv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retelux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saa-gcrig.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgvfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silurianpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simonihay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sisaacs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skewereddreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taylorsultimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techbuiltconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themiddlelifepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themidwestshootout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timbrelarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toiye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toysplusauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trusttrailfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williamlhahn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfmanmerch.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000162905b5e160000040300483046022100edb329b97107a55088232536aa6d13c4236eb832e376da37b010b94a32fb3b72022100d9f1c4950fbe1b31ade3363f283beaeccb389e70c7f54884b3e541e577347445007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162905b5e0000000403004630440220102ff069d727cde4809018ffd137e1079480fed6dcf53a8614bbccebe2a56b9802202799cfdd3a713876561bff9cff2c100474a2fe9f4d0a0caf7d4bc559aa074505
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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