40somethingmagazine.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:20:30:a8:72:86:a9:d4:69:5f:72:e9:a9:91:6b:0b:0e:7b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=40somethingmagazine.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:20:30:a8:72:86:a9:d4:69:5f:72:e9:a9:91:6b:0b:0e:7b
Serial Number (int): 359402857041044755580009178219892141919867
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d3:4c:bc:82:91:4e:10:ea:0c:67:80:c2:14:68:1d:17:8e:2e:16:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:a9:bc:97:1c:cc:9b:0b:a1:c3:0e:01:a4:2a:5f:3e:44:d4:4b:32
Fingerprint (sha256): 57:26:5b:20:fd:95:87:32:53:31:93:ea:09:df:35:f8:de:2c:3c:bb:f3:ff:6d:02:2f:6a:08:7b:47:05:f1:b0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 40somethingmagazine.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 40somethingmagazine.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.40somethingmagazine.com
*.ancentors.com
*.assurionprotectionservices.com
*.atozmp3songs.com
*.bitcoinsweeps.com
*.bluebonnetprivatehighschool.com
*.bubbuybaby.com
*.chicagogtribune.com
*.cookmath.com
*.coolnathgames.com
*.cw47columbia.com
*.cwigifts.com
*.cybersuithome.com
*.dainping.com
*.dcsplash.com
*.diygocarts.com
*.eeges.com
*.exvedio.com
*.facdl.com
*.findships.com
*.kohlskickingcamp.com
*.macysinsight.com
*.madsay.com
*.makemyreip.com
*.mangashere.com
*.mtelliot.com
*.neatnovies.com
*.northbrosford.com
*.partirenweekend.com
*.peiawv.com
*.piplinedeals.com
*.porticoapts.com
*.postlewaitnursery.com
*.poterairlines.com
*.queeninfo.com
*.rockaauto.com
*.saetna.com
*.sansals.com
*.santaanitainn.com
*.sixvedio.com
*.streetmarques.com
*.tawise.com
*.unisadigital.com
*.veter-center.com
*.vitavost.com
*.wesrmarine.com
*.xn--gmail-1ua.com
*.xn--gocaching-b4a.com
*.zamobwap.com
*.zemmioptical.com
40somethingmagazine.com
ancentors.com
assurionprotectionservices.com
atozmp3songs.com
bitcoinsweeps.com
bluebonnetprivatehighschool.com
bubbuybaby.com
chicagogtribune.com
cookmath.com
coolnathgames.com
cw47columbia.com
cwigifts.com
cybersuithome.com
dainping.com
dcsplash.com
diygocarts.com
eeges.com
exvedio.com
facdl.com
findships.com
kohlskickingcamp.com
macysinsight.com
madsay.com
makemyreip.com
mangashere.com
mtelliot.com
neatnovies.com
northbrosford.com
partirenweekend.com
peiawv.com
piplinedeals.com
porticoapts.com
postlewaitnursery.com
poterairlines.com
queeninfo.com
rockaauto.com
saetna.com
sansals.com
santaanitainn.com
sixvedio.com
streetmarques.com
tawise.com
unisadigital.com
veter-center.com
vitavost.com
wesrmarine.com
xn--gmail-1ua.com
xn--gocaching-b4a.com
zamobwap.com
zemmioptical.com

Other certificates including the domain name 40somethingmagazine.com

(limited to 100 certificates)
sellercental.com
pornorazo.com
avatarholder.com
40somethingmagazine.com
smallbouquet.com
avatarholder.com
avatarholder.com
gayneed.com
nyama.online
multicibles.com
kvadratdoma.com
uhb.au

Certificate

The complete raw certificate details for 40somethingmagazine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359402857041044755580009178219892141919867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 20:23:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-24 20:23:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '40somethingmagazine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859959325262178841270536102050509643644074665228721648502822614118229096063116910097338104227726362390645597894619592535673129193472810384134645165657528084474135392462095370443810304081313292495152261825857196948411085025137125066415361880403858032330384070334660516797806354831748936280503337839563067063178702502791777462054473197645369307674393591366547300780574949509298639528326241572628610044591952662646966368847526218568313251534537201196510392854252281653628017431933573687387846667416238352595659999558831726331975233551327868221424546069619928297145995543566067663298943394956338599164133856250537503110793219674739147945983621269288420845082418607247972565176535642444068730655906495701131019542842701590716487237435110455534491685302306499022192377952623308185686225841675329489700367243599094223145942112874408601871166400196951907210770147678269467034573959088593372302529397905417503686400435830800131760397370700765367135658337587588399618185934840246144036190298913128506213423710003886734432304820202310935919118910549371716099161446142387637655425328978135286457923943286122024143919244767279286441392274459666004676301890807579579483997213795253400587962495272986088373318423834613058868816512374056903952088199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d34cbc82914e10ea0c6780c214681d178e2e1681
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1822 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.40somethingmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ancentors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assurionprotectionservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atozmp3songs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluebonnetprivatehighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bubbuybaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicagogtribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cookmath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coolnathgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cw47columbia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwigifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cybersuithome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dainping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcsplash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diygocarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eeges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exvedio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kohlskickingcamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macysinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madsay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makemyreip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangashere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtelliot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neatnovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northbrosford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partirenweekend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peiawv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piplinedeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porticoapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postlewaitnursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poterairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.queeninfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockaauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saetna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sansals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santaanitainn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixvedio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streetmarques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tawise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unisadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veter-center.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitavost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wesrmarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gmail-1ua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gocaching-b4a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zamobwap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zemmioptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '40somethingmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancentors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assurionprotectionservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atozmp3songs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluebonnetprivatehighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubbuybaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagogtribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookmath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolnathgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cw47columbia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwigifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybersuithome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dainping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcsplash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diygocarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eeges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exvedio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kohlskickingcamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macysinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madsay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makemyreip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangashere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtelliot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neatnovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northbrosford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partirenweekend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peiawv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piplinedeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porticoapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postlewaitnursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poterairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queeninfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockaauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saetna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sansals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santaanitainn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixvedio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetmarques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tawise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unisadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veter-center.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitavost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wesrmarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gmail-1ua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gocaching-b4a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zamobwap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zemmioptical.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d6a4ede7d000004030047304502203a8d55aacbecec418eccec42e8a0c99565a3322223a90c868f6e234b64d841c8022100b6774b4e6b141c474b020c8dd985ab895adc16d8b654341bea6fdc78304d8dcd007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d6a4ede64000004030047304502210085e07b9cb2df2f37e8617df091b6bd435be8b66447824a635601ee400b8204e30220265de95b2f201276ce30c8220453467e19a463aa7a02f881172da031a53880de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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