*.berwickag.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:03:58:a1:21:d1:75:89:0a:2d:9c:9a:71:21:aa:7f:5d:23 was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.berwickag.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:03:58:a1:21:d1:75:89:0a:2d:9c:9a:71:21:aa:7f:5d:23
Serial Number (int): 349587799537141676983987258156406460603683
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d3:12:14:d4:31:f7:22:95:a5:ae:d3:1c:31:e4:5a:b0:6c:da:b3:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:95:f2:03:a4:9e:7a:d5:26:17:b0:e8:c8:91:28:46:62:2b:76:94
Fingerprint (sha256): 58:6d:dd:66:14:4c:ae:7b:bc:15:ce:f6:fd:f2:3f:74:cd:4a:57:71:88:b2:a1:a0:70:67:20:26:bc:11:34:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.berwickag.net

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.berwickag.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.april15th.com
*.backyardsbeautifulwhb.com
*.berwickag.net
*.bestcounselingschools.org
*.bluepencilists.com
*.carolinaviking.com
*.cocktailcommunity.com
*.cornerstonegeneralcontractor.com
*.eatdrinkscience.com
*.fearandsporting.com
*.hairconnection.net
*.hernanmedialaw.com
*.iajgs2016.org
*.iajgs2017.com
*.iajgs2017.org
*.indeeph2o.com
*.institute4se.com
*.loseweightminnesota.com
*.lrdennis.com
*.myuntv.com
*.northwestmedispa.com
*.retelux.com
*.robertestrin.net
*.saa-gcrig.org
*.sacseopro.com
*.skewereddreams.com
*.taylorsultimate.com
*.themiddlelifepodcast.com
*.themidwestshootout.com
*.toiye.com
*.toysplusauctions.com
*.trusttrailfest.com
*.williamlhahn.com
*.wmorris.com
april15th.com
backyardsbeautifulwhb.com
berwickag.net
bestcounselingschools.org
bluepencilists.com
carolinaviking.com
cocktailcommunity.com
cornerstonegeneralcontractor.com
eatdrinkscience.com
fearandsporting.com
hairconnection.net
hernanmedialaw.com
iajgs2016.org
iajgs2017.com
iajgs2017.org
indeeph2o.com
institute4se.com
loseweightminnesota.com
lrdennis.com
myuntv.com
northwestmedispa.com
retelux.com
robertestrin.net
saa-gcrig.org
sacseopro.com
skewereddreams.com
taylorsultimate.com
themiddlelifepodcast.com
themidwestshootout.com
toiye.com
toysplusauctions.com
trusttrailfest.com
williamlhahn.com
wmorris.com

Other certificates including the domain name berwickag.net

(limited to 100 certificates)
*.berwickag.net
*.sheafferer.co.uk
web14.tigertech.info
customers.tigertech.net
web14.tigertech.info
customers.tigertech.net
*.komfortz.com
*.homewithmykings.com
*.samanthaashleyviolette.com
*.kalliopi-tsiknia.com
*.berwickag.net
customers.tigertech.net
*.komfortz.com
web14.tigertech.info
customers.tigertech.net
*.trenders-co.com
*.guygardnercolonwarrior.com
customers.tigertech.net
web14.tigertech.info
web14.tigertech.info
*.trenders-co.com
customers.tigertech.net
customers.tigertech.net
*.myblauto.com
web14.tigertech.info
web14.tigertech.info
customers.tigertech.net
*.silurianpharma.com
*.realmadridfcnews.com
customers.tigertech.net
*.komfortz.com

Certificate

The complete raw certificate details for *.berwickag.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCN90E1mXty09N/kLlPV
aiUXPxOYBpDIf1g7vaRu8OWHHS9psiHslcL1IH3K6BksddyIRdkFGgHhOpVz7Q2K
36ZJ08RNAHDhB1EgfEE3ocrtEUsQyvPLw9I3MBnFWtto6bKgD+1VpSz2y8w85cR7
aje2hBmgBzYIucQxoRqHFSGOSgH7Uv1eWr1LIDHU3VZ4ABNqIk5ae/p2MX3VE0Pb
JnlmGrZGt9P4VuZuTGsc9C7yomU/3gO528c7Nc9gPeg05Pqibb1uyAcyIicb30Fr
riKrWtKmqoMMtfRfxgKmc0Af7TAON8ZGaynNU8Ar79BAfESouVtbTugydJ9IAYab
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349587799537141676983987258156406460603683
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-07 08:24:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-05 08:24:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.berwickag.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21730489945225475147237775676369299776568159368139663381186447957947648001387043440994505622689379476781034145605174562412671258366001149654594648577663952920069494163582440725994536306413419343503358462467076842219814996174206571137409493387190466553258483727781663268480481690473802662122380057311135815954365569741876446387754820237591159602718713336865537533050194019554275099288642918480994886653857211258484345190307797220165154041637338034546721922889734745674574679110460776321320411850755404840620979348477137068669796049262830980304186507272568974533918345682992527001762287446993799557049102688908579609399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:19|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1372 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.april15th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backyardsbeautifulwhb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berwickag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestcounselingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluepencilists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carolinaviking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocktailcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cornerstonegeneralcontractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatdrinkscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fearandsporting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairconnection.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hernanmedialaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iajgs2016.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iajgs2017.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iajgs2017.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indeeph2o.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.institute4se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loseweightminnesota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lrdennis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myuntv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northwestmedispa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retelux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robertestrin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saa-gcrig.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sacseopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skewereddreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taylorsultimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themiddlelifepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themidwestshootout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toiye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toysplusauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trusttrailfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.williamlhahn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmorris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'april15th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backyardsbeautifulwhb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berwickag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcounselingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluepencilists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinaviking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocktailcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornerstonegeneralcontractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatdrinkscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fearandsporting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairconnection.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hernanmedialaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iajgs2016.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iajgs2017.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iajgs2017.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indeeph2o.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institute4se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loseweightminnesota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrdennis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myuntv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwestmedispa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retelux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertestrin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saa-gcrig.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacseopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skewereddreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taylorsultimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themiddlelifepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themidwestshootout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toiye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toysplusauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trusttrailfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williamlhahn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmorris.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bcbbf887f0000040300483046022100fe240aee6c62f466a606536aa5e9f07406f9e15b4a0d9682058637d123bf466c022100aaf5a7da6d65068c3b868ff56a93bfc5b9924931a7ae0384dfc505b37fe0908c00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bcbbf884c0000040300473045022100f6476dc6a3b01cee8a9a37855500817e64c583cfec6ce4f13c0e62171b05b67502207ca282d4e0c08b0f50aa163431b6ec7b17155e3e218897c87539e284f1782945
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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