ugfco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:7f:10:f2:0d:d2:91:86:e8:4a:e5:c7:37:8a:11:fb:b5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ugfco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:7f:10:f2:0d:d2:91:86:e8:4a:e5:c7:37:8a:11:fb:b5
Serial Number (int): 326839972185753603777718618957110674848693
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:1a:f4:45:e6:8e:63:64:2c:c4:5c:b0:7f:e0:6b:5d:8e:43:57:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:b7:88:39:e8:d1:e4:54:2c:2c:5c:93:48:02:fc:bd:d8:d1:ed:58
Fingerprint (sha256): 65:ef:57:66:ef:6e:c5:ad:25:2b:7b:e7:85:8f:12:8d:18:af:85:a4:4b:72:d9:5d:99:f7:b6:8d:46:3e:41:76

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ugfco.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ugfco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andipalmer.com
apermanentmakeup.com
blackransom.com
blastball.com
bloomingkid.com
capaporcapa.com
cien.org
dancingriverofallen.com
deskembosser.com
elegantvan.com
energie.org
expicorp.com
fhwco.com
frescostemcellcenter.com
fresnostemcell.com
fungusshop.com
gluup.com
hazmate.com
illinoissportsmedicine.com
ipacificbeach.com
jmkstudio.com
jointpainboulder.com
jointpainburlington.com
kechem.com
lunamaster.com
malaysialivecasino.com
mervesevi.com
miamifertilityivf.com
mississippistemcellcenter.com
mysticcenter.com
okrco.com
organiccabernetsauvignon.com
poly-guard.com
qalzo.com
qualpaper.com
regalmaple.com
remitamo.com
renostemcellcenter.com
ringstudio.com
salottino.com
smileyband.com
sports-corner.com
stemcellsantonio.com
stephaniekeller.com
tensioni.com
timbrar.com
ugfco.com
vitamincoop.com
wltco.com
www.andipalmer.com
www.apermanentmakeup.com
www.blackransom.com
www.blastball.com
www.bloomingkid.com
www.capaporcapa.com
www.cien.org
www.dancingriverofallen.com
www.deskembosser.com
www.elegantvan.com
www.energie.org
www.expicorp.com
www.fhwco.com
www.frescostemcellcenter.com
www.fresnostemcell.com
www.fungusshop.com
www.gluup.com
www.hazmate.com
www.illinoissportsmedicine.com
www.ipacificbeach.com
www.jmkstudio.com
www.jointpainboulder.com
www.jointpainburlington.com
www.kechem.com
www.lunamaster.com
www.malaysialivecasino.com
www.mervesevi.com
www.miamifertilityivf.com
www.mississippistemcellcenter.com
www.mysticcenter.com
www.okrco.com
www.organiccabernetsauvignon.com
www.poly-guard.com
www.qalzo.com
www.qualpaper.com
www.regalmaple.com
www.remitamo.com
www.renostemcellcenter.com
www.ringstudio.com
www.salottino.com
www.smileyband.com
www.sports-corner.com
www.stemcellsantonio.com
www.stephaniekeller.com
www.tensioni.com
www.timbrar.com
www.ugfco.com
www.vitamincoop.com
www.wltco.com
www.ymmco.com
ymmco.com

Other certificates including the domain name ugfco.com

(limited to 100 certificates)
francavillaalmare.org
www.ugfco.com
tupelo.space
ugfco.com
ordinedivendita.com
www.ugfco.com
www.hellobeter.com
ugfco.com
www.ugfco.com
lkcco.com
www.oechem.com
ugfco.com
alvintoffler.com
ugfco.com
unusualandthingsmadebyhand.online
crisprbiotech.com
bulkdomainwhois.com
birchflooring.com

Certificate

The complete raw certificate details for ugfco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2oKQb3HKeslGOBHnIJ4
qFxcUIZYPXFlbku+PAw8Mw+c5DhzpubKyVpvcKAQo3EBTam4PjNeaLbESaM1Kwm7
sideDFESkZQbevgewlrjB4a7BATIpBjPXi/vg0h+TOohBq1wwGR7pr9KTItCadMe
Uz3TtwMOenN/DkNSytPSI5c9t5+NHGfSQVmz2G00PptC/s1uSdxHuO5jDg2Gp/FY
9lTZudn3+2wFeRUReqafx+nxalsWZXIko3awguPs/7rt3TacHNDyq3R2aLMtBsoI
MBpbcCkojvWdcuOHkL2LLOdW9gwUH99+FET7fxeOhtpj5cC7K9SxZ2TWPO3+2bEG
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326839972185753603777718618957110674848693
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 23:59:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 23:59:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ugfco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20629134014717523176924422287714879633900161159667621515319897375844230145340953511078553100996741179829861278271102968615776609791620258849302477156920934267062053683486612859951340549546757888494647137368338192051709033641240789462825214324265601279530189219890179417025494568406824528227853860822201165129807676986724151641151455540269653837541732683517017817889380296045336002570330229943561238633765914087989847144303641192104858790866277955522690731796482682596310443164264461395240124035010853652003549210535125353405532248595938011974346183995983276269940594433169664606211036517727988747330578751365768611529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af1af445e68e63642cc45cb07fe06b5d8e4357d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1940 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andipalmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apermanentmakeup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackransom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blastball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloomingkid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capaporcapa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cien.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancingriverofallen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deskembosser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elegantvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expicorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frescostemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fresnostemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fungusshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gluup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoissportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipacificbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmkstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainboulder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainburlington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kechem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunamaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malaysialivecasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mervesevi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miamifertilityivf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mississippistemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysticcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okrco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organiccabernetsauvignon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poly-guard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qalzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regalmaple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remitamo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renostemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ringstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salottino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smileyband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sports-corner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellsantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephaniekeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tensioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timbrar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugfco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitamincoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wltco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andipalmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apermanentmakeup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackransom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blastball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloomingkid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capaporcapa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cien.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dancingriverofallen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deskembosser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elegantvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expicorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fhwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frescostemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fresnostemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fungusshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gluup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hazmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.illinoissportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipacificbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmkstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainboulder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainburlington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kechem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lunamaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malaysialivecasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mervesevi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miamifertilityivf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mississippistemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysticcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okrco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organiccabernetsauvignon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poly-guard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qalzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regalmaple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.remitamo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renostemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ringstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salottino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smileyband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sports-corner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellsantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stephaniekeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tensioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timbrar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ugfco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitamincoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wltco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymmco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymmco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d75615a48000004030048304602210082bec11572f3783eaf8f2039ebad946644d85f3a59f8bdba3216bb7e4b0fb4ca022100bb0c62c341022d11e05309b06411bcf54c25d470233bd226f75d638fa1ae0cbe007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d75615c5a000004030047304502203999c3d71afa98d03900e2583e3c8b2b3436bc4d5ac931fbd13e6457dff45e03022100ac2fcdae8751aece3f284c875e80761cbd61fbec6bad802f0143ee3ef000a8cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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