alphalion.goprimer.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b2:03:66:55:1b:08:e3:1d:7b:b8:0f:d0:d8:86:ce:35:cf was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alphalion.goprimer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:03:66:55:1b:08:e3:1d:7b:b8:0f:d0:d8:86:ce:35:cf
Serial Number (int): 321911638131621438880136787167515660662223
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 93:f9:0c:4b:2e:f4:20:dd:2b:fb:32:6a:43:cc:6b:41:74:e4:61:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): af:36:56:4d:fe:06:e1:26:a4:16:3d:f1:19:04:bc:13:c9:39:2c:88
Fingerprint (sha256): 5c:d3:b6:89:6d:0a:32:13:fb:ce:69:48:a0:c4:45:53:0f:7a:87:df:52:79:72:bc:29:df:67:17:f5:de:c0:21

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alphalion.goprimer.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alphalion.goprimer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alphalion.goprimer.com
apostrophe.goprimer.com
atolla.goprimer.com
billcom.goprimer.com
buy.letsbld.com
cameo.goprimer.com
clubmagichour.goprimer.com
cuemath.goprimer.com
curalife.goprimer.com
cushion.goprimer.com
cutbackcoach.goprimer.com
dario.goprimer.com
discover.fieldtriphealth.com
diversyfund.goprimer.com
evernow.goprimer.com
evernow2.goprimer.com
explore.wineaccess.com
felixforyou.goprimer.com
fieldtriphealth.goprimer.com
fiton.goprimer.com
forhims.goprimer.com
gainful.goprimer.com
get.fitonapp.com
get.forhims.com
get.metabolicrenewal.com
get.monarchmoney.com
get.montikids.com
get.noom.com
getresults.iloveskininc.us
go.gainful.com
hawthorne.goprimer.com
invest.diversyfund.com
katkin.goprimer.com
ladder.goprimer.com
langehair.goprimer.com
lifeprofitness.goprimer.com
liveclass.cuemath.com
metabolicrenewal.goprimer.com
modernfertility.goprimer.com
monarchmoney.goprimer.com
montikids.goprimer.com
mysteryscience.goprimer.com
offer.mydario.com
otter.goprimer.com
peachystudio.goprimer.com
picsart.goprimer.com
prowritingaid.goprimer.com
radfordbeauty.goprimer.com
rb.victoriaradford.com
rocksbox.goprimer.com
sans.goprimer.com
savvy.goprimer.com
secure.goprimer.com
shop.alphalion.com
signup.bill.com
skininc.goprimer.com
start.farmsteadapp.com
start.getsunday.com
subscribe.rocksbox.com
sunday.goprimer.com
thefeed.goprimer.com
therapynotebooks.goprimer.com
triplebyte.goprimer.com
trufora.goprimer.com
try-app.go.insure
try.apostrophe.com
try.atolla.co
try.breathesans.com
try.cameo.com
try.clubmagichour.com
try.curalife.com
try.cushion.ai
try.cutbackcoach.com
try.evernow.co
try.evernow.com
try.felixforyou.ca
try.forhers.com
try.hawthorne.co
try.joinladder.com
try.katkin.club
try.langehair.com
try.lifeprofitness.com
try.madison-reed.com
try.modernfertility.com
try.mysteryscience.com
try.otter.ai
try.peachystudio.com
try.picsart.com
try.prowritingaid.com
try.savvy.insure
try.thefeed.com
try.therapynotebooks.com
try.triplebyte.com
try.trufora.com
try.upstep.com
try.wildfang.com
upstep.goprimer.com
wildfang.goprimer.com
wineaccess.goprimer.com

Other certificates including the domain name goprimer.com

(limited to 100 certificates)
apostrophe.goprimer.com
tls.automattic.com
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
getapp.in
getapp.in
5000772504.goprimer.co
allwellbeauty.goprimer.com
alphalion.goprimer.com
apostrophe.goprimer.com
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
alphalion.goprimer.com
allwellbeauty.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
aj1.goprimer.co
getapp.in
goprimer.com
buy.letsbld.com
apostrophe.goprimer.com
tls.automattic.com
getapp.in
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
agirlnamedotis.goprimer.com
aj1.goprimer.co
goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
alphalion.goprimer.com
alphalion.goprimer.com
buy.letsbld.com
tls.automattic.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
ios.goprimer.com
allwellbeauty.goprimer.com
*.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
help.goprimer.com
apostrophe.goprimer.com
apostrophe.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
agirlnamedotis.goprimer.com
getapp.in
getapp.in
ios.goprimer.com
android.goprimer.com
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
tls.automattic.com
allwellbeauty.goprimer.com
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
tls.automattic.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
allwellbeauty.goprimer.com
alphalion.goprimer.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
aj.goprimer.co
getapp.in
apostrophe.goprimer.com
alphalion.goprimer.com
getapp.in
apostrophe.goprimer.com
help.goprimer.com
5000772504.goprimer.co
alphalion.goprimer.com
tls.automattic.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in

Certificate

The complete raw certificate details for alphalion.goprimer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx+T1TK1449E40GmCNv/
tkbyI9NxL0T8bsVoQH2WQfBOSLIxqC7L9vyoRe/sfYBadHaus7q4mthdbims155t
Hq36KXVCwO+u8Dl7nIZLsdyN0qMRKjRnCix9lXq7oOnjGTqHGSZ/AhXcXILbFW74
j0F+gzOUU35ln+VHr34/mSwqP91fofTUWAERQgtzFnDS20Rw7gpw3dByx7/9WfTq
oT19S8whVYlNu2aiu0HQoZ5Gq44J7rgJZH7TOcZg/BU5IlTKMz0TeHtPeUng6PqD
PfD47HQFBEGz0HuuLW1/BnNBOIhWskiEnhC7qB9RhJMTonzOzucxpaCnN5obsDPl
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321911638131621438880136787167515660662223
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-29 15:41:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-27 15:41:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alphalion.goprimer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23117181240535189620161210102454440990947510706366210986712854360987234997048427204014927856438819983537372426553022268381397766254923215444135902807476385613501323292878219252129223926756990079042249475389972609495365107417771777869265468644599004205453819634246416929932043375570788424407813551533297306650008157789749679161084251700327098904613477566292563785816193946632475923741799879900792508548495282180822772019631938547668804786874379530653017036096376986414197701201922414821548673413580893565168502511061163978265547404387149328303104094724349129913915068731657427756079227840947035258601853520855327565203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93f90c4b2ef420dd2bfb326a43cc6b4174e46140
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphalion.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apostrophe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atolla.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billcom.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.letsbld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameo.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmagichour.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuemath.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curalife.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cushion.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutbackcoach.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dario.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.fieldtriphealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversyfund.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow2.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.wineaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felixforyou.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldtriphealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiton.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forhims.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainful.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.fitonapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.forhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.metabolicrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.monarchmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.montikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.noom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getresults.iloveskininc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gainful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawthorne.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.diversyfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katkin.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladder.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langehair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeprofitness.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveclass.cuemath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolicrenewal.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernfertility.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monarchmoney.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montikids.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysteryscience.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offer.mydario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otter.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachystudio.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picsart.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prowritingaid.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radfordbeauty.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rb.victoriaradford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocksbox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sans.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savvy.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.alphalion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.bill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skininc.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.farmsteadapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.getsunday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.rocksbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunday.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefeed.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapynotebooks.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triplebyte.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trufora.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try-app.go.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.apostrophe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.atolla.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.breathesans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cameo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.clubmagichour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.curalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cushion.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cutbackcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.felixforyou.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.forhers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.hawthorne.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.joinladder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.katkin.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.langehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.lifeprofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.madison-reed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.modernfertility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.mysteryscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.otter.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.peachystudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.prowritingaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.savvy.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.thefeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.therapynotebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.triplebyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.trufora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.upstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.wildfang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstep.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildfang.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineaccess.goprimer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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