lists.improvplayworks.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:13:65:01:aa:94:d1:01:0a:a8:6e:40:c4:77:f9:4d:b4:1e was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lists.improvplayworks.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:13:65:01:aa:94:d1:01:0a:a8:6e:40:c4:77:f9:4d:b4:1e
Serial Number (int): 355048769378210036729494865762630666925086
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:3f:42:a9:5d:4a:1b:82:2d:2a:8a:1d:1f:e4:5f:74:7c:19:8d:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:d0:28:25:f0:d7:ee:75:9d:5b:75:e1:da:21:54:b0:ad:c4:a8:9d
Fingerprint (sha256): 5a:18:d7:f7:e3:ab:c5:a2:eb:2d:8e:89:99:e1:56:95:59:70:05:9d:38:c9:28:6e:7e:d3:a1:6c:cd:71:f9:02

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lists.improvplayworks.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.improvplayworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.iajgs.com
lists.iajgs.net
lists.improvplayworks.com
lists.indicant.net
lists.indoexpat.org
lists.indosoc.org.uk
lists.innerphysician.com
lists.innertruthmassage.com
lists.innosci.net
lists.integrativephysicaltherapyservices.com
lists.integrityusa.org
lists.internet-of-everything.fr
lists.interstell.com
lists.ipte.net
lists.irisarri.org
lists.israelaction.net
lists.israelaction.org
lists.italiansrus.com
lists.iucnosg.net
lists.jacobkaye.com
lists.jejuneinstitute.org
lists.jfmf.org
lists.jgsgb.com
lists.jgsgb.org
lists.jillmanning.com
lists.jkswineandliquor.com
lists.jmwauction.com
lists.jmwauctions.com
lists.joefgoodman.com
lists.joekowan.com
lists.joelpalmermusic.com
lists.joshuarich.com
lists.julieharrington.net
lists.jumpingrock.net
lists.justcomm.org
lists.justusnyc.org
lists.juvenilejusticeinformationexchange.com
lists.kalamazooacupuncturehealth.com
lists.kalamazooacupunctureoffice.com
lists.katzenfinch.com
lists.kazoologist.org
lists.keithavenue.org
lists.kempiweb.net
lists.kentest.com
lists.kentnerburn.com
lists.kigreene.com
lists.kingstoncigarshop.com
lists.kingstoncigarshoppe.com
lists.kitbradley.net
lists.kokotele.net
lists.kokoteleguitarworks.com
lists.kutzkypark.org
lists.lacamas-shores.com
lists.lacamasshores-community.com
lists.lacamasshores.org
lists.lachoff.com
lists.lafayettekiwanis.org
lists.lagerrhythms.com
lists.lahaciendagaleria.com
lists.lajollabridge.com
lists.laposadadelriosonora.com
lists.larchmontumc.org
lists.laurelspringsmarietta.org
lists.lcn-news.org
lists.ldssinglesinseattle.com
lists.legacyhomecaretn.com
lists.leonard-harris.com
lists.lesleytsina.com
lists.lexvanewcomers.org
lists.lhoffman.com
lists.lindamichelet.com
lists.linwoodspiritual.org
lists.linwoodspiritualcenter.org
lists.linwoodspiritualctr.org
lists.llamasannyc.com
lists.lobsterbarnyc.com
lists.locallygrownnorthfield.org
lists.luckypet.com
lists.lylefire.com
lists.magnaenterprise.net
lists.malvernsweatlodge.com
lists.manet-routing.net
lists.margaretmcgaffeyfisk.com
lists.markgillardrealestatemarketeer.com
lists.marthamiller.com
lists.master-acn.fr
lists.master-comasic.fr
lists.master-rosalind-franklin.fr
lists.masters-herbrand.fr
lists.mattiedaughtry.com
lists.maubc.com
lists.maubc.org
lists.maxpartner.com
lists.medinacoogs.org
lists.memorial-umc.org
lists.menschworks.com
lists.mgstudios.biz
lists.znrcds.com

Other certificates including the domain name improvplayworks.com

(limited to 100 certificates)
*.aconspiracyofauthors.com
lists.iajgs.com
*.the-den-mn.com
web01.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.the-den-mn.com
customers.tigertech.net
web01.tigertech.net
lists.wcaia.ca
lists.howtothinksideways.com
lists.iajgs.com
lists.galvanys.com
web01.tigertech.net
*.ingrassiafamily.net
lists.znrcds.com
*.ingrassiafamily.net
lists.iajgs.com
*.the-den-mn.com
*.shadetreefuturists.com
*.the-den-mn.com
lists.improvplayworks.com
*.the-den-mn.com
web01.tigertech.net
lists.hotdishcooking.com
lists.familyheartcamp.org
web01.tigertech.net
lists.iajgs.com
lists.howtothinksideways.com
customers.tigertech.net
lists.i-ddb.com
*.the-den-mn.com
web01.tigertech.net
lists.iajgs.com
lists.i-ddb.com
web01.tigertech.net
lists.i-ddb.com
lists.iajgsjewishcemeteryproject.org
*.the-den-mn.com
*.simonbunyard.com
*.the-den-mn.com
customers.tigertech.net
customers.tigertech.net
lists.genealogycenter.net
customers.tigertech.net
lists.iajgs.com
*.the-den-mn.com
*.the-den-mn.com
lists.i-ddb.com
*.simonbunyard.com
lists.th-audio.org
lists.i-ddb.com

Certificate

The complete raw certificate details for lists.improvplayworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJHfFjriTRH2Wzc15ArF
e+g7bSEDD/bmQBvIzG++QR3L7W19/+kSb71BMOgvVIDZpcgvwX7fIkGJdevfnILm
QZqdNnmG52g+y9JoOE3yYaUmQsgWWbRY8mzZHCjXDOorW6+uMV/40C7RiuuLH9Wq
1ZQRCn/wFcanFD+KSTjbjxcloawABd/nrOv24c5yLR0qH+gVAQDi6ZZHsA2SZfvd
DhSnX5jGvHlTvEUlcLGk8h6VQiSNuXZedq8v8bYCaThKuwvYLa9cpqrpH7R9GBjC
vTntyrCfTv8RGHS+NDN1HVq3WToRlQJEEj04XcUUNugdyOM2ccnOBYSXYW+4BngY
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355048769378210036729494865762630666925086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-01 07:26:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 07:26:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.improvplayworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24309686438010488905831354453442404266253605059115381720402950745326854352159658512865834392177191885777416207294811536058795049109676781332315435634097961109356562899704370526527265356736053481939492444483102811947639291157896260325185487831294983932533418278144399215027838112086112023846002213023540143383776794534732583565033936039111056502528780706075083134574018234281603861653727506487849962192664100617491512471482156036049416311210607075041825770927749499893510841889236960892889506989695162235820860163360336977422292748717561569929982020753085796187755007616523875133904311988743579157444378501769835583739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b3f42a95d4a1b822d2a8a1d1fe45f747c198d1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2450 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.improvplayworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.indicant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.indoexpat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.indosoc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.innerphysician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.innertruthmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.innosci.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.integrativephysicaltherapyservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.integrityusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.internet-of-everything.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.interstell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ipte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.irisarri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.israelaction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.israelaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.italiansrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iucnosg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jacobkaye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jejuneinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jfmf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jgsgb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jgsgb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jillmanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jkswineandliquor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jmwauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jmwauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joefgoodman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joekowan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joelpalmermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joshuarich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.julieharrington.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jumpingrock.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.justcomm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.justusnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.juvenilejusticeinformationexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kalamazooacupuncturehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kalamazooacupunctureoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.katzenfinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kazoologist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.keithavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kempiweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kentest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kentnerburn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kigreene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kingstoncigarshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kingstoncigarshoppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kitbradley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kokotele.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kokoteleguitarworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kutzkypark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lacamas-shores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lacamasshores-community.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lacamasshores.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lachoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lafayettekiwanis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lagerrhythms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lahaciendagaleria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lajollabridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.laposadadelriosonora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.larchmontumc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.laurelspringsmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lcn-news.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ldssinglesinseattle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.legacyhomecaretn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.leonard-harris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lesleytsina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lexvanewcomers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lhoffman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lindamichelet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.linwoodspiritual.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.linwoodspiritualcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.linwoodspiritualctr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.llamasannyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lobsterbarnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.locallygrownnorthfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.luckypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lylefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.magnaenterprise.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.malvernsweatlodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.manet-routing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.margaretmcgaffeyfisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.markgillardrealestatemarketeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.marthamiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.master-acn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.master-comasic.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.master-rosalind-franklin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.masters-herbrand.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mattiedaughtry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.maubc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.maubc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.maxpartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.medinacoogs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.memorial-umc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.menschworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mgstudios.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.znrcds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169385cca050000040300483046022100cc1803d00b4524d29cb7bd4827b0c37703f4ff74abed96da4b6e42cf0dda7843022100e3f429f4784d16621d7893b55a4550f80fae19ed8fae13e3285c3ebfc380fd2a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169385cc9fa0000040300473045022100845460b830b998f0bf7b773ab3d67b2e7c9f6951bfe146d0cb4cfd56c9e47010022058f64b34310528a811022d52d3530fa7eca18652965c7fa1fc2da8cb36dad65d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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