aj.goprimer.co

Issued by R3

About this certificate

This digital certificate with serial number 04:61:a1:6e:40:61:05:d0:47:9b:f3:1c:bd:75:93:0c:f1:78 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aj.goprimer.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:61:a1:6e:40:61:05:d0:47:9b:f3:1c:bd:75:93:0c:f1:78
Serial Number (int): 381671111484108973446394504369856353988984
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3e:19:fd:b1:9e:e5:b4:bf:35:bb:42:88:fd:f8:aa:9d:b8:30:a1:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 09:db:74:73:14:4a:54:b1:13:e5:2c:44:3f:03:e4:cd:6c:ab:5a:c1
Fingerprint (sha256): 59:eb:6c:92:e5:37:e7:b5:79:da:98:3e:da:e3:23:6e:86:f7:f8:20:e1:18:c9:6c:82:6d:76:23:f0:63:a5:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aj.goprimer.co

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aj.goprimer.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aj.goprimer.co
ajtest.goprimer.com
apostrophe.goprimer.com
atolla.goprimer.com
billcom.goprimer.com
buy.kettleandfire.com
buy.letsbld.com
buy.nomnomnow.com
cuemath.goprimer.com
curalife.goprimer.com
cushion.goprimer.com
cutbackcoach.goprimer.com
diversyfund.goprimer.com
evernow.goprimer.com
felixforyou.goprimer.com
fiton.goprimer.com
forhims.goprimer.com
gainful.goprimer.com
get.fitonapp.com
get.forhims.com
get.metabolicrenewal.com
get.montikids.com
get.noom.com
get.tulipcremation.com
get.ubiome.com
go.gainful.com
hawthorne.goprimer.com
invest.diversyfund.com
katkin.goprimer.com
kettleandfire.goprimer.com
langehair.goprimer.com
lastbrand.goprimer.com
lifeprofitness.goprimer.com
liveclass.cuemath.com
metabolicrenewal.goprimer.com
mixbook.goprimer.com
modernfertility.goprimer.com
montikids.goprimer.com
mysteryscience.goprimer.com
nomnomnow.goprimer.com
otter.goprimer.com
papaandbarkley.goprimer.com
peachystudio.goprimer.com
picsart.goprimer.com
rocksbox.goprimer.com
secure.goprimer.com
sfox.goprimer.com
shop.lastbrand.com
signup.bill.com
start.bungalow.com
start.farmsteadapp.com
start.getsunday.com
subscribe.rocksbox.com
sunday.goprimer.com
supercoffee.goprimer.com
thefeed.goprimer.com
therapynotebooks.goprimer.com
triplebyte.goprimer.com
trufora.goprimer.com
try-app.go.insure
try.apostrophe.com
try.atolla.co
try.curalife.com
try.cushion.ai
try.cutbackcoach.com
try.drinksupercoffee.com
try.evernow.co
try.felixforyou.ca
try.forhers.com
try.hawthorne.co
try.katkin.club
try.langehair.com
try.lifeprofitness.com
try.madison-reed.com
try.mixbook.com
try.modernfertility.com
try.mysteryscience.com
try.otter.ai
try.pbtopicals.com
try.peachystudio.com
try.picsart.com
try.sanebox.com
try.sfox.com
try.thefeed.com
try.therapynotebooks.com
try.triplebyte.com
try.trufora.com
try.wildfang.com
upstep.goprimer.com
wildfang.goprimer.com

Other certificates including the domain name goprimer.co

(limited to 100 certificates)
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
aj1.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
aj1.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
aj.goprimer.co
5000772504.goprimer.co
aj.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
aj.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
5000772504.goprimer.co
academia.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
academia.goprimer.com
aj.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
aj.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
academia.goprimer.com
academia.goprimer.com
aj.goprimer.co
agirlnamedotis.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com

Certificate

The complete raw certificate details for aj.goprimer.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3r8BenExX9tV5JjXQgt
WzGDGzY1aUB+lLOPQeqH60ANjFXv/A85CD3wviuDEFWgYCML4R1HYbdF9PFuahXG
VtkJbphnCbAw6RVIU2/zQ3F9iOu4dTt6GSIheD7dQ/oPIFZqQWKryuefu4XqQ+Pz
Cbdun0cwhnlSwILCnKbeSQ4YdLNIgHWYi8CD9J7+i59+WXb7xi52TTDrMmNBDn7a
0bfUVzsN97M0Db+IKMxb1YHnb2RwgXm6tRs+jf1Io6UJqOlqerLMtyT6RmXdJJc6
HQl2IIYRmbwqYxJaS99I46SlFKscj04iol9su3GPscoyXGDE7YHZLgBMxVo/s+9W
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381671111484108973446394504369856353988984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 16:33:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-14 16:33:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aj.goprimer.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21647396049303425579060031725445392084383285634087317699619803751796399560632900922614508631393816611023932525596195187742617793623391978343387639542352342258888338474658883451765468020144633564863032059296517338573789169499991489257570713297974922907127136755612303406397171600416430116856429215926412124086727168615563158346071342529481756364763360070404285263371130172959700068432891440825968514233443002133933639992461469758913309436923579574142640728686612521762389226681326332022111938622972354757574536267964561168502958328790650604377716174625427366094612949087492799419108414573634732184528486821358637897281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e19fdb19ee5b4bf35bb4288fdf8aa9db830a15e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1942 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aj.goprimer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajtest.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apostrophe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atolla.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billcom.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.kettleandfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.letsbld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.nomnomnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuemath.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curalife.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cushion.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutbackcoach.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversyfund.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felixforyou.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiton.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forhims.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainful.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.fitonapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.forhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.metabolicrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.montikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.noom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.tulipcremation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.ubiome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gainful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawthorne.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.diversyfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katkin.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kettleandfire.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langehair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastbrand.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeprofitness.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveclass.cuemath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolicrenewal.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mixbook.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernfertility.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montikids.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysteryscience.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomnomnow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otter.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papaandbarkley.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachystudio.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picsart.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocksbox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lastbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.bill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.bungalow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.farmsteadapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.getsunday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.rocksbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunday.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercoffee.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefeed.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapynotebooks.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triplebyte.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trufora.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try-app.go.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.apostrophe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.atolla.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.curalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cushion.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cutbackcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.drinksupercoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.felixforyou.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.forhers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.hawthorne.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.katkin.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.langehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.lifeprofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.madison-reed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.mixbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.modernfertility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.mysteryscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.otter.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.pbtopicals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.peachystudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.sanebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.sfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.thefeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.therapynotebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.triplebyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.trufora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.wildfang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstep.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildfang.goprimer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001783c19f3e50000040300483046022100fff542c94c9010f31fbebf115b23b995a1997229a2880e47f7d8ca48d174898e0221009fb64c82f1669d111c168ecba1c7584fee8cc62ce4a008436d3fad121d273380007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001783c19f3d20000040300473045022100a491d0312b1f645918a4ee1bcf3cc681d10edcbd666d5f721e47140eaa9afaad02202f82e459fabc5b748de4ec4150f8036e32e3781bdcd68f4586551afb07d0339c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0084b8d4442e087c5c5e83ab2953b96b1e4cc90af65e86af80c9cb6ffab26feb2538e95aa0181b91d98e3c6ffde7c92dc262b6be34927c9041847d2230dfd4bb68450ff7486961bcf8a446f1e236098a41a9e4ba6b80908a71f4de647a4ddc411f66a9af9e0d35447195bcf8f135073d75ccb3ce103d5e33ee3b77d848b63c06666946d0c7d35b505231f6547b86af2dfdf3e5dd6e404e72dc6eab171186dfb9db67bb34be6bc66a042784f3341f5acc82f6be70c104e987a721f066c9f08069780477494222bc783303e55e75b8635e0e999cf90a878909306d58b4646aaa359403008df85f025f3c380d907a7f7b9743fe1e1a433b03de5b23c1660cc8e9b38b