*.freedom4um.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:fd:2b:d2:26:80:88:94:e1:ad:3d:b0:d2:4a:29:89:9b:d0 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.freedom4um.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fd:2b:d2:26:80:88:94:e1:ad:3d:b0:d2:4a:29:89:9b:d0
Serial Number (int): 434598830525112501227740736669092904803280
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:0c:1c:0d:2a:33:7a:a1:1b:85:0e:2f:57:cc:8d:26:94:f3:4e:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:16:cb:7f:98:bd:03:67:73:6c:02:9b:d6:3c:bb:0b:15:d0:5b:ae
Fingerprint (sha256): 61:c1:fa:ad:ff:b5:c7:6e:35:09:95:c0:4c:72:9d:6b:31:3f:72:f8:74:07:50:89:93:a8:d5:21:c1:c8:f0:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.freedom4um.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.freedom4um.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.doneinmud.com
*.doobernorthwest.com
*.dr-mouth.com
*.drdesignremodel.com
*.dresdow.net
*.drjgoodman.com
*.dungeondragongames.com
*.dutchdoornapa.com
*.earthtails.com
*.eatdammit.com
*.ecologyoferos.com
*.edifynews.com
*.eduardmasia.com
*.eigenroute.com
*.electroniktrading.net
*.eleeo.org
*.elizabethfedorzyn.com
*.elvisfromouterspace.com
*.emmiehunter.com
*.enthusiasticcoffee.com
*.enthusiasticspirits.com
*.envivospanishworkbooks.com
*.erikebenal.com
*.everlastingdata.com
*.everlastingdata.org
*.explorehomerak.com
*.familystockclub.com
*.fantasywellspringanthologies.com
*.fantasywellspringimprint.com
*.fantasywellspringpublishing.com
*.fathersonsolar.com
*.fatofthelandmovie.com
*.fiftyfrontier.com
*.firstpersonfutures.com
*.flamencoorganic.com
*.flipyourself.org
*.floortoceilingdallas.com
*.flowerchildartistry.com
*.forefeathers.com
*.fortpointarts.net
*.foxfiresuite.com
*.franticantics.net
*.freedom4um.com
*.freeyounique.com
*.frogthrower.com
*.functional-microbiomics.org
*.fundamentalvideo.com
*.future-unwritten.com
*.gallopingsawhorse.com
doneinmud.com
doobernorthwest.com
dr-mouth.com
drdesignremodel.com
dresdow.net
drjgoodman.com
dungeondragongames.com
dutchdoornapa.com
earthtails.com
eatdammit.com
ecologyoferos.com
edifynews.com
eduardmasia.com
eigenroute.com
electroniktrading.net
eleeo.org
elizabethfedorzyn.com
elvisfromouterspace.com
emmiehunter.com
enthusiasticcoffee.com
enthusiasticspirits.com
envivospanishworkbooks.com
erikebenal.com
everlastingdata.com
everlastingdata.org
explorehomerak.com
familystockclub.com
fantasywellspringanthologies.com
fantasywellspringimprint.com
fantasywellspringpublishing.com
fathersonsolar.com
fatofthelandmovie.com
fiftyfrontier.com
firstpersonfutures.com
flamencoorganic.com
flipyourself.org
floortoceilingdallas.com
flowerchildartistry.com
forefeathers.com
fortpointarts.net
foxfiresuite.com
franticantics.net
freedom4um.com
freeyounique.com
frogthrower.com
functional-microbiomics.org
fundamentalvideo.com
future-unwritten.com
gallopingsawhorse.com

Other certificates including the domain name freedom4um.com

(limited to 100 certificates)
freedom4um.com
customers.tigertech.net
customers.tigertech.net
freedom4um.com
*.houndsgrounds.net
customers.tigertech.net
freedom4um.com
freedom4um.com
freedom4um.com
freedom4um.com
*.freedom4um.com
freedom4um.com
*.houndsgrounds.net
freedom4um.com
customers.tigertech.net
freedom4um.com
freedom4um.com
freedom4um.com
freedom4um.com
freedom4um.com
*.rentaequipo.com.mx
customers.tigertech.net
freedom4um.com
freedom4um.com
freedom4um.com
customers.tigertech.net
*.houndsgrounds.net
freedom4um.com
freedom4um.com
freedom4um.com
freedom4um.com

Certificate

The complete raw certificate details for *.freedom4um.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q+eUrtPJCh5wpZTib6n
rVcHF5EQmiKvc99WHgmxM9aFYvnkDlfbbYuT1yLO8c9emdWdwNMz2oPaE4EhUyuQ
81MwlBZ6iTOfVKkgtjs4ODlvVmiegGI/yhGffMjz+OfCym7Rz+aiDT+97C8MaaWU
vp63UhULwN8+JIUSBYY2BserGpnKdNuXtOSbANj04f+FnKibMHDpDiLikaadiNHK
ClOBQnYO/i0ll+2X65MLvHlL6bqvHn/cAPc0K4RRHYUdLa1gzARN/15Q1Dpl5fpM
K6O2FBHaZfuzSMj9tHD9WfGl8DcsWRqtLCexDcD03jyk6hx9RcSFbeUYtliEpR/t
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434598830525112501227740736669092904803280
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 23:38:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 23:38:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.freedom4um.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27606551167890912989574240904648063587295768471418549809380196524764230052673036521140310785779465707415087745497467758770241211944065783604558357837975300163355590724765590280646654160183648927844699025661657957633472640833990660504657218865781370550094488825813307980010816826713775308624209316190156445853065297481967469204668961369229088167200999122000068255630707727894362957963989084424110793150118697928144433300279911180717806274731201580370103727826010586524404611006476970374021312856148753826545540555209310176276389788013407758839634439998767988916493043831378444489771899872472604829499604744485617003903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff0c1c0d2a337aa11b850e2f57cc8d2694f34e0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doneinmud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doobernorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dr-mouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drdesignremodel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dresdow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drjgoodman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dungeondragongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dutchdoornapa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earthtails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatdammit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecologyoferos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edifynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eduardmasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eigenroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electroniktrading.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eleeo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elizabethfedorzyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elvisfromouterspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emmiehunter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enthusiasticcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enthusiasticspirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.envivospanishworkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erikebenal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everlastingdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everlastingdata.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.explorehomerak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familystockclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasywellspringanthologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasywellspringimprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasywellspringpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fathersonsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fatofthelandmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiftyfrontier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstpersonfutures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flamencoorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flipyourself.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floortoceilingdallas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowerchildartistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forefeathers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortpointarts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxfiresuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.franticantics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedom4um.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeyounique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frogthrower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.functional-microbiomics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundamentalvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.future-unwritten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallopingsawhorse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doneinmud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doobernorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-mouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drdesignremodel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dresdow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drjgoodman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dungeondragongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dutchdoornapa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthtails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatdammit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecologyoferos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edifynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduardmasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eigenroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electroniktrading.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eleeo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elizabethfedorzyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elvisfromouterspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmiehunter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enthusiasticcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enthusiasticspirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envivospanishworkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erikebenal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everlastingdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everlastingdata.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explorehomerak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familystockclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasywellspringanthologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasywellspringimprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasywellspringpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fathersonsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatofthelandmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiftyfrontier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstpersonfutures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flamencoorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipyourself.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floortoceilingdallas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowerchildartistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forefeathers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortpointarts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxfiresuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franticantics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedom4um.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeyounique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frogthrower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'functional-microbiomics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundamentalvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'future-unwritten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallopingsawhorse.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3ca83b360000040300473045022100b5f29db8ee935141167e4cb5b2e18aed7dd9194dcd5f0150358ed73b7238fac402205c68588e920f014060230fdf0bf8a642f42bd2ad605e8c6bb70c48ed1e4a7f1700750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d3ca83b230000040300463044022075f98c1d01462c5aa6ed012deb7bac4051bca0c6ec50e5b1516165b339dd5fcc02201bc6324cbf5448ffb103c957245f779342af2c77c8d6d52c8f2fce0c1528d5fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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