exoniaconsulting.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a5:a4:cf:2c:14:e3:02:7b:fc:c9:25:d3:98:b8:83:a8:64 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=exoniaconsulting.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:a4:cf:2c:14:e3:02:7b:fc:c9:25:d3:98:b8:83:a8:64
Serial Number (int): 404814803359835117881981759495577153022052
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 95:8a:41:87:53:66:0a:e1:69:8b:b0:83:5b:9a:a3:23:55:95:94:3b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:d9:63:24:53:40:66:9e:da:e1:69:bf:22:dc:89:d4:15:87:e2:de
Fingerprint (sha256): 59:b1:03:cc:45:c2:44:76:48:b4:eb:47:ce:ff:f1:e8:20:f9:d5:0b:32:7f:5e:17:df:7b:71:5d:88:42:86:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate exoniaconsulting.ca

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exoniaconsulting.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1c6.com
420musicfestival.org
9071.org
9809.org
9821.org
accessfintech.org
advisorengine.org
apify.de
artelia.com
aurenia.com
autoworkshops.org
available.estate
barbqinamerica.com
bestseafoodinamerica.com
bonoda.com
calprivate.org
casinoengine.org
cheeselam.org
christiandoctrine.bible
claytoncrossings.bible.claytoncrossings.bible
cloudnative.org
clutterclinic.org
containerhouseaustralia.com
damoclesdefense.org
deafgo.bible
discoverbahia.com
estateplanningbyzipcode.org
exoniaconsulting.ca
faithandliberty.bible
flexichannels.org
frfi.ie
g-o-l-d.org
ghostsandthelongingforamelia.com
gogreenpennsylvania.com
gogreenvirginia.com
goldaffiliateprograms.org
greatfitness.org
h4ha.com
healthyhomeexpert.org
healthyhomepennsylivania.com
healthyhomevirginia.com
hefia.com
heydar-aliyev-center.de
hireathena.org
homeopathie.org
hospital.be
illinoisinjuries.org
illustrations.bible
indianapolis.world
joteca.com
journeymaker.bible
jwdc.org
latinos.tube
lesdemocrates.org
looka.org
maxler.world
memberworks.org
middesk.org
naturalgas.world
newyorkcityguns.org
nyasha.org
nyorganizers.org
opfg.org
optoro.org
placeiq.org
plumlending.org
prodigy.vc
property.ninja
psalm125.com
psalm56.com
psalm75.com
realestateowned.org
root-cause-of-abuse.org
saintflanagan.ie
sculpit.style
sennder.org
shaddi.one
shalbum.org
shippingcontainershomesaustralia.com
simply-elegant-essence.org
smartica.com
statestitle.org
steakinamerica.com
topsoilgeorgia.com
topsoilphiladelphia.com
trumania.com
turfs.org
turnriver.org
umiglobal.org
upcurve.org
velocita.org
wannavaca.com
witmedia.com
www.calgarymedia.com
www.crypedia.com
www.encyqlopedia.com
www.learnthe.bible
www.tort.fund
zinnia.marketing

Other certificates including the domain name exoniaconsulting.ca

(limited to 100 certificates)
exoniaconsulting.ca
exoniaconsulting.ca
exoniaconsulting.ca
kiesza.ca
biblecourse.ca
exoniaconsulting.ca
exoniaconsulting.ca
exoniaconsulting.ca
5272653.ca
exoniaconsulting.ca
hugabee.ca
hugabee.ca
exoniaconsulting.ca
exoniaconsulting.ca
hugabee.ca
exoniaconsulting.ca
hugabee.ca
exoniaconsulting.ca
exoniaconsulting.ca
exoniaconsulting.ca
exoniaconsulting.ca
exoniaconsulting.ca
impossible.ca
exoniaconsulting.ca
exoniaconsulting.ca
exoniaconsulting.ca
exoniaconsulting.ca
exoniaconsulting.ca
exoniaconsulting.ca
exoniaconsulting.ca
exoniaconsulting.ca
exoniaconsulting.ca

Certificate

The complete raw certificate details for exoniaconsulting.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3EXE4BGq4+UVPUm4IfJ
1Y2yAHiMwiBzyGraRRwnqqIh02lbGx69pQA7YVviilgQTcJAkCSkcoyABFZdWVzV
pUFiY5uWn+bV7JbEggCjbhsFO7ONUf9QzbYjd8UVCWXos4kcKF7EH7vqqp5AE72T
p9wFLZRdT5sBmMjNWHlB7nbF3Rv7W5yXYFeQJsxWhpHOYQbpqxoo4IroBK0Eg+rM
4IdKfxzp0GjjJP6+Qjk8dyOutzVkwUbN3lHmI9ZC3ZdJUfEczvtDBADxrl1SF5lU
iDJmHQZxz2Ocl2oDGkS1ffMjo8fVvO+J7M7r6UaL8S0MJ77zFAFp8LpaSPLAqnVQ
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404814803359835117881981759495577153022052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 22:33:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 22:33:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exoniaconsulting.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25682142735249373267483283357760350382539826079104749694594494392383360158825287230289816751569287636638468743066202014094109686749321823681674336521707332587233416717980273812914016157380375771014379846664176858341398024106407576674584337085891198522952650771310278012574292531617040785871601500156179068828965891781597575560736640153464058252893233703729930774332978976364999334783462691388383463112358681286348856307452715613139351460845410077630621878283228710017967866104608289348243977351365118989462176552578836127598324946745547180807744986806837557185506555449463725828050134086859847888145028955634302013533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							958a418753660ae1698bb0835b9aa3235595943b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1770 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1c6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '420musicfestival.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9071.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9809.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9821.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessfintech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisorengine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apify.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artelia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurenia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoworkshops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'available.estate'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbqinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestseafoodinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calprivate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinoengine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheeselam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christiandoctrine.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claytoncrossings.bible.claytoncrossings.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudnative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clutterclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'containerhouseaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damoclesdefense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deafgo.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverbahia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estateplanningbyzipcode.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exoniaconsulting.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithandliberty.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexichannels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frfi.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g-o-l-d.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostsandthelongingforamelia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogreenpennsylvania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogreenvirginia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldaffiliateprograms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatfitness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h4ha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomeexpert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomepennsylivania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomevirginia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hefia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heydar-aliyev-center.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hireathena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeopathie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospital.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisinjuries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illustrations.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianapolis.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joteca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journeymaker.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latinos.tube'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesdemocrates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'looka.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxler.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middesk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalgas.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkcityguns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyasha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyorganizers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opfg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optoro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placeiq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plumlending.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodigy.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psalm125.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psalm56.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psalm75.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateowned.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'root-cause-of-abuse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintflanagan.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.style'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sennder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaddi.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shalbum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shippingcontainershomesaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simply-elegant-essence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statestitle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steakinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsoilgeorgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsoilphiladelphia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trumania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turfs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnriver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umiglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upcurve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wannavaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calgarymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crypedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encyqlopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnthe.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tort.fund'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.marketing'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f689b52fe00000403004630440220650a2f415fe4cb2242a4de24ed217cf3ebeea435f91e7b8007e0f365534a419402204f8dc62e9b8209cb41ce65e250129d049bbb0a32e2f8fc4a64ec7ada1829825d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f689b53320000040300473045022100e188fce7b07d7a29698cd34886108d236e2bb6a673689b940980002476287fe0022012a761055cd767385a54b95e1b882cb1ed198635a1691b052be2c20af6d1d463
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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