andrewbernard.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:64:ea:25:9b:1f:fd:2f:67:d0:d5:29:38:7d:2d:89:e7:d9 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=andrewbernard.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:ea:25:9b:1f:fd:2f:67:d0:d5:29:38:7d:2d:89:e7:d9
Serial Number (int): 295676329099679941010296368471446435522521
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:42:71:e5:86:f7:0f:ca:0a:b8:64:99:b5:2e:fc:18:62:11:06:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:7d:61:cb:5b:bc:b5:d0:f6:e1:7c:a8:71:42:c7:c6:e3:f7:76:bc
Fingerprint (sha256): 61:97:b4:31:5b:ad:2a:dd:41:6f:f1:e6:01:89:a8:dc:24:42:d8:f4:a6:be:78:03:3d:ae:00:bf:7b:a1:a5:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate andrewbernard.org

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for andrewbernard.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dgoogles.com
a-i-r-f-o-r-c-e.com
airzing.org
andrewbernard.org
bidcanada.com
brandmont.com
casinodollars.co.uk
cbnoil.com
colombiago.com
daman.work
daugavpils.work
dentiesalute.it
designerconferences.com
digitoil.com
discount.travel
fast.cool
funhoroscope.com
giochidelcasino.it
grapevine.expert
healthyhomesavings.com
homedrapes.com
idatenow.com
jesusfamilyreunion.net
junin.work
luanda.work
madeofblocks.com
messages.info
mountangel.work
nelspruit.work
passofundo.work
prairiedusac.work
sayanogorsk.work
secondverse.com
tainan.work
target-technology.com
thevillasamui.com
travellersdental.com
unroomschools.com
vianadocastelo.work
whkt.com
wkly.org
www.3dgoogles.com
www.a-i-r-f-o-r-c-e.com
www.airzing.org
www.andrewbernard.org
www.bidcanada.com
www.brandmont.com
www.casinodollars.co.uk
www.cbnoil.com
www.colombiago.com
www.daman.work
www.daugavpils.work
www.dentiesalute.it
www.designerconferences.com
www.digitoil.com
www.discount.travel
www.fast.cool
www.funhoroscope.com
www.giochidelcasino.it
www.grapevine.expert
www.healthyhomesavings.com
www.homebath.com
www.homedrapes.com
www.idatenow.com
www.jesusfamilyreunion.net
www.junin.work
www.luanda.work
www.madeofblocks.com
www.messages.info
www.mountangel.work
www.nelspruit.work
www.passofundo.work
www.prairiedusac.work
www.sayanogorsk.work
www.secondverse.com
www.stallings.work
www.tainan.work
www.target-technology.com
www.thevillasamui.com
www.travellersdental.com
www.unroomschools.com
www.vianadocastelo.work
www.whkt.com
www.wkly.org

Other certificates including the domain name andrewbernard.org

(limited to 100 certificates)
5272653.ca
sculpit.media
andrewbernard.org
librti.ca
sculpit.media
allanblock.ca
sculpit.media
sculpit.media
jenksamericatoastmasters.club
andrewbernard.org
5272653.ca
5272653.ca
5272653.ca
andrewbernard.org
xian.bible
9809.org
9809.org
9809.org
leaselock.ca
leaselock.ca
5272653.ca
dailyfren.com.discoverbahia.com.andrewbernard.org
barbkops.ca
leaselock.ca
leaselock.ca
5272653.ca
sculpit.media
allanblock.ca
andrewbernard.org
shop.gutrad.de
leaselock.ca
allstar.bid
sculpit.media
impossible.ca
estate.ninja
woven.bible
allstar.bid
allstar.bid
34755625397.ca
9809.org
leaselock.ca
blogroll.bible
andrewbernard.org

Certificate

The complete raw certificate details for andrewbernard.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrt4ge0ZHXV1YdNteJJY
1mkMEGrQ0YmbnFGiosgIHKZ1uE8E+Ua0lJkw/VIOrPaeBLDv5GlpmHJgWWFLHRgs
QU6Gm97r1R0u07V9wJzOfA8t/QpKTpbXP3HASmI//uJH24tCFqOB2BN5DGCyUeiX
faXYPf99zZJOtCpEsSCqQN17VHqrjcKLM2s4+zh4RtWNjLgb1b+SOQwoIZW8sNr8
uFV9Ek3Sgvo3N+0QAEBH9TmhEVlHbuoGsrF+nnwn/TkeJPb7Mkq3yYECUeuy2eGl
qKTYcinTxJ5LMCkgyWySrchtS1su+SF9fgW2hjuCv0DvgJQB+SG7c9nWH0xGXbE0
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295676329099679941010296368471446435522521
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 09:09:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 09:09:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'andrewbernard.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22057910327779971025025955242189711230276132567096100495512844646956674968976872468453119006078422647189056077143964105595202672932065333329042497594759286813117204914598844802765030738006641863062300304100734085739502253608163776827452839070915963403800703313612649961398233533551511121186723462584962368565110078536719372769186074911112505093275568623781482934995027931928967248155333901980797182205326617089368463529627087751820672644451915044303781615633905824077255579272398049166343911272223922892850472910743038343668757701499840709012467276687305005650802276851110356758311691801773965313601475381052870571077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							664271e586f70fca0ab86499b52efc186211060d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dgoogles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-i-r-f-o-r-c-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airzing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewbernard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandmont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinodollars.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbnoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colombiago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daman.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daugavpils.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentiesalute.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designerconferences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discount.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funhoroscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giochidelcasino.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grapevine.expert'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomesavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homedrapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idatenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusfamilyreunion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junin.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luanda.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeofblocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messages.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountangel.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelspruit.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passofundo.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prairiedusac.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sayanogorsk.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tainan.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'target-technology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevillasamui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travellersdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unroomschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vianadocastelo.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wkly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dgoogles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a-i-r-f-o-r-c-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airzing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewbernard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bidcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandmont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinodollars.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbnoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colombiago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daman.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daugavpils.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentiesalute.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designerconferences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discount.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fast.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funhoroscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giochidelcasino.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grapevine.expert'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyhomesavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homebath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homedrapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idatenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusfamilyreunion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.junin.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luanda.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madeofblocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.messages.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountangel.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelspruit.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passofundo.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairiedusac.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sayanogorsk.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secondverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stallings.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tainan.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.target-technology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thevillasamui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travellersdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unroomschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vianadocastelo.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wkly.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016980d45b5c00000403004630440220208f741b646339f9d4f879267d1c1fb5de0a694cd3fd1f9e41aad416b412f14202203cfc52268bf2f1302ff92ec2c8ac34e5ab799d909a6f019f388b123753205523007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016980d45bb2000004030046304402200e11678f8fa73b11a99772ebb109a9e7782ceffb9a3eaebd2b822d413e86cd4902200162c94c88f3fd28847cfc2379c746c8484ffe2ed16519479f56ecc65b0db080
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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