homegeneratorsystem.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e9:5d:e2:dd:79:26:8e:31:58:ef:ef:b2:3e:1c:66:cb:35 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=homegeneratorsystem.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e9:5d:e2:dd:79:26:8e:31:58:ef:ef:b2:3e:1c:66:cb:35
Serial Number (int): 427859731374328737022807288794198208596789
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 96:e5:ee:a2:16:7d:e6:25:38:8d:66:8f:37:0e:d3:cd:a7:cd:41:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 64:1e:a0:12:73:9a:a6:c6:d0:3b:1e:39:9d:23:80:ba:7e:1b:0f:03
Fingerprint (sha256): 64:a9:2c:c3:95:fb:f6:fa:ae:ca:bc:dc:ee:96:5d:03:c1:f2:d0:ee:9d:15:8f:e8:0b:23:b2:89:ec:a6:fd:32

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate homegeneratorsystem.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for homegeneratorsystem.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

214leaf.com
5iron.org
areacrediti.com
askfortix.uk
bowie-knife.com
cardiovasculaire.com
cflbetting.com
dontcryformeargentina.com
duahite.com
easelstand.com
epltipping.com
equilifefatlossity.net
fakevirtual.com
growthxponential.co.uk
hannahkim.com
homegeneratorsystem.com
icamonline.com
introvertsruntheworld.com
johnzerzan.com
kudzuestimate.com
lakeisabellarealestate.com
lauriumlab.com
luxurydiaperbag.com
magapromise.com
marshallislandstravel.com
medical-uniform.com
nagoyafashionweek.com
naturesbreeze.com
noka.org
non-gmofood.org
normanbethune.com
oysterbaydental.com
prptampa.com
route365.com
sendekoinfree.com
sexparti.com
solar-oven.com
sportsmedicinecolumbia.com
stamford-locksmith.com
talentexpertise.com
thebannerexchangenetwork.com
thebeautifultask.com
tiaoma-dayinji.com
tickerdoc.com
tiketi.click
tucsonstemcell.com
tuttoqualita.com
waterpurificationtesting.com
wenpingd.com
woodsinn.com
www.214leaf.com
www.5iron.org
www.areacrediti.com
www.askfortix.uk
www.bowie-knife.com
www.cardiovasculaire.com
www.cflbetting.com
www.dontcryformeargentina.com
www.duahite.com
www.easelstand.com
www.epltipping.com
www.equilifefatlossity.net
www.fakevirtual.com
www.growthxponential.co.uk
www.hannahkim.com
www.homegeneratorsystem.com
www.icamonline.com
www.introvertsruntheworld.com
www.johnzerzan.com
www.kudzuestimate.com
www.lakeisabellarealestate.com
www.lauriumlab.com
www.luxurydiaperbag.com
www.magapromise.com
www.marshallislandstravel.com
www.medical-uniform.com
www.nagoyafashionweek.com
www.naturesbreeze.com
www.noka.org
www.non-gmofood.org
www.normanbethune.com
www.oysterbaydental.com
www.prptampa.com
www.route365.com
www.sendekoinfree.com
www.sexparti.com
www.solar-oven.com
www.sportsmedicinecolumbia.com
www.stamford-locksmith.com
www.talentexpertise.com
www.thebannerexchangenetwork.com
www.thebeautifultask.com
www.tiaoma-dayinji.com
www.tickerdoc.com
www.tiketi.click
www.tucsonstemcell.com
www.tuttoqualita.com
www.waterpurificationtesting.com
www.wenpingd.com
www.woodsinn.com

Other certificates including the domain name homegeneratorsystem.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for homegeneratorsystem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3xcPcZiy6ununJkd5Vu
YSeEwH/H4efIGAzWxdynJA5gbQaG1jIExvCb1zMywfrpCsBDZ7fuvDIGs+8IrlC8
biWEeSzmHQv0uwa68ZR4DuasFx8Lv8mQ02CWnXwm5s1N505TEY1QBPQLGNeycqGl
KUBknww/AR9+b1TylpzsLQU/TjVc+YUmoikP9bil4NiA1qsiknVCSNrZuk78H+Ke
BqGtSY7X6x1OG2aXTxl1eEen7MlxTO8HqK1YGhBUp9ghRKnwrlfcNXaIOnz2HTQp
NlX3SCO4IgIyS5tUal6yi1jcoVfCDMImv3FbwkV8UzJE804PeZZkTCxVySLro1y/
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427859731374328737022807288794198208596789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 17:56:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 17:56:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'homegeneratorsystem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26192653486178177931550537165155823732023115702303087593897304709698953663652562810356465632767742689338013611124749247062870513129080172212857241849250673453983894889386139508739448789572612862435249125756380322174580930193150165626957517312337418834384414564078306240873048623133190022309198228592744380283156339876944428876914444268425773770429756806435582349545055789349897990431603766339870800449850564127296300641682942744435886687635828684078912836372730312886189567127895349545601689097735326815544991694295076345499123158220980641299901343683374226961090570277542949235560849771935668628390236903147426332491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96e5eea2167de625388d668f370ed3cda7cd41f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '214leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5iron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'areacrediti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askfortix.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowie-knife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardiovasculaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cflbetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dontcryformeargentina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duahite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easelstand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epltipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equilifefatlossity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fakevirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growthxponential.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hannahkim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homegeneratorsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icamonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'introvertsruntheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnzerzan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kudzuestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakeisabellarealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lauriumlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxurydiaperbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magapromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshallislandstravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical-uniform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagoyafashionweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturesbreeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noka.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'non-gmofood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'normanbethune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oysterbaydental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prptampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'route365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendekoinfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexparti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solar-oven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinecolumbia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stamford-locksmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentexpertise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebannerexchangenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebeautifultask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiaoma-dayinji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickerdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiketi.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucsonstemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuttoqualita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterpurificationtesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wenpingd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodsinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.214leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5iron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.areacrediti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askfortix.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowie-knife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardiovasculaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cflbetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dontcryformeargentina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duahite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easelstand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epltipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equilifefatlossity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fakevirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growthxponential.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hannahkim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homegeneratorsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icamonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.introvertsruntheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnzerzan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kudzuestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakeisabellarealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lauriumlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxurydiaperbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magapromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marshallislandstravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medical-uniform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nagoyafashionweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturesbreeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noka.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.non-gmofood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.normanbethune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oysterbaydental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prptampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.route365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sendekoinfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sexparti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solar-oven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinecolumbia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stamford-locksmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talentexpertise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebannerexchangenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebeautifultask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiaoma-dayinji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tickerdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiketi.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tucsonstemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuttoqualita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterpurificationtesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wenpingd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodsinn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ffcf6046a000004030046304402201a96fd017e628cb5fedde51083ba4943e234b33f88b971df5133d2d5b094e3ac02204cfec1f32e9c915658900b5a2b27a0f09e882896680a4600837b7ebe931c4a400077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ffcf604a20000040300483046022100bb418b64ebf8b4c85186a3ba1b57e1575649eda6e1bc47fa21eb0eec4adbca69022100a9c2c47ec1e3c9e9ad4084f1bc227ace59ffc4b9c0b26fba3c2100db65155a89
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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