www.bonafirerecords.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:ff:91:48:19:d7:b8:80:c1:a3:43:38:e2:65:ae:74:5a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bonafirerecords.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:ff:91:48:19:d7:b8:80:c1:a3:43:38:e2:65:ae:74:5a
Serial Number (int): 306934120080116154531371301986684220896346
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:1e:58:09:8d:a3:4c:f5:45:9f:99:5d:8e:37:89:96:3c:ba:6a:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:45:93:be:44:f7:ae:bd:3c:01:de:1d:a3:ca:c2:49:39:2f:ab:9c
Fingerprint (sha256): 68:91:fb:ea:7f:10:d0:8d:85:1d:d9:0a:2d:69:5e:fa:27:15:31:be:58:13:6e:12:62:5b:f7:b6:89:c9:64:c8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bonafirerecords.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bonafirerecords.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1488.ninja
aimanager.ca
antifashion.club
asean.la
barbkops.ca
bonafirerecords.ca
bookitentertainment.ca
buxvalve.com
buyamerican.club
entreprisesduquebec.ca
finalcial.org
futureflight.co.za
ggbs.asia
greaterbayauto.com
greaterbaycon.com
greaterbaydesign.com
greaterbayhealth.com
greaterbayspa.com
greaterbaytrading.com
hiphep.com
houstonpdr.com
httpsthepiratebay.org
iiaserv.co.za
ijumpsa.co.za
jnvsh.org
kompanionka.com
leopard.pizza
marshallonline.mba
milapp.org
mobirisedeveloper.com
narlei.ca
nondigestible.com
office-storage.com
plantbasedprotein.ca
private.moda
propholdings.co.za
questiongaming.com
raphaelle.ca
redcrpss.org
refcross.org
safecasino.co.za
santa-catalina.com
theie.com
theme.club
thesocialmedswork.com
uscmarshall.mba
vapeto.ca
viralmovies.org
vubii.com
wreve.com
www.1488.ninja
www.aimanager.ca
www.antifashion.club
www.asean.la
www.barbkops.ca
www.bonafirerecords.ca
www.bookitentertainment.ca
www.buxvalve.com
www.buyamerican.club
www.entreprisesduquebec.ca
www.finalcial.org
www.futureflight.co.za
www.ggbs.asia
www.greaterbayauto.com
www.greaterbaycon.com
www.greaterbaydesign.com
www.greaterbayhealth.com
www.greaterbayspa.com
www.greaterbaytrading.com
www.hiphep.com
www.houstonpdr.com
www.httpsthepiratebay.org
www.iiaserv.co.za
www.ijumpsa.co.za
www.jnvsh.org
www.kompanionka.com
www.leopard.pizza
www.marshallonline.mba
www.milapp.org
www.mobirisedeveloper.com
www.narlei.ca
www.nondigestible.com
www.office-storage.com
www.plantbasedprotein.ca
www.private.moda
www.propholdings.co.za
www.questiongaming.com
www.raphaelle.ca
www.redcrpss.org
www.refcross.org
www.safecasino.co.za
www.santa-catalina.com
www.theie.com
www.theme.club
www.thesocialmedswork.com
www.uscmarshall.mba
www.vapeto.ca
www.viralmovies.org
www.vubii.com
www.wreve.com

Other certificates including the domain name bonafirerecords.ca

(limited to 100 certificates)
aifortzl.nl
startupsfield.com
1488.ninja
www.aimanager.ca
lymedisease.clinic
multiladders.com
carvacuumcleaners.com
www.racinestorage.com
propholdings.co.za
www.bonafirerecords.ca
x4-advanced.com
eurowraith.com
northportchristmaslightinstallers.com
racecopters.com
www.texasregenerativedoctors.com
affitto-subito.com
privatemetrics.org
talpe.com
www.matchpulse.com
bonafirerecords.ca
www.jointpainsouthbend.com
www.tortilleria.com

Certificate

The complete raw certificate details for www.bonafirerecords.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMojCCC4qgAwIBAgISA4X/kUgZ17iAwaNDOOJlrnRaMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMzAwODUxMDJaFw0y
MDAyMjgwODUxMDJaMCExHzAdBgNVBAMTFnd3dy5ib25hZmlyZXJlY29yZHMuY2Ew
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs+8SYli4UMw11Wi1ZOi2E
85J20huHof6U7MrazrZlNZ/FOQZBulj+8YMbAaHtuxlrLmSL/lHxybSWbUQrnW2l
0tkRlzgn2E8PYawR/Ol3q5hJ3aNjRY7THAJUDDv4hudFMCSpxlVF25swhBmQwSWG
inOwrXweF7trfDT9O0uHh1r1ocbkSn4ToEH1v/O96YVizBW7/5zdGJaRUZzI3D5L
TzWHCmWIBzuByWXuXGQGdBlt58WsbXxD1O+oWYkIaZpZMNzmvt1YbtaN/yv3tPJl
vWjXr30vXdaWmaXdbQ+7IuN9zbUvUv16iX4Ds1sJ4/XM2h/upBNJrENsQQ0WeeOP
AgMBAAGjggmpMIIJpTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLMeWAmNo0z1RZ+Z
XY43iZY8umrdMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG
AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wggddBgNVHREEggdUMIIHUIIKMTQ4OC5uaW5qYYIMYWltYW5h
Z2VyLmNhghBhbnRpZmFzaGlvbi5jbHVigghhc2Vhbi5sYYILYmFyYmtvcHMuY2GC
EmJvbmFmaXJlcmVjb3Jkcy5jYYIWYm9va2l0ZW50ZXJ0YWlubWVudC5jYYIMYnV4
dmFsdmUuY29tghBidXlhbWVyaWNhbi5jbHVighZlbnRyZXByaXNlc2R1cXVlYmVj
LmNhgg1maW5hbGNpYWwub3JnghJmdXR1cmVmbGlnaHQuY28uemGCCWdnYnMuYXNp
YYISZ3JlYXRlcmJheWF1dG8uY29tghFncmVhdGVyYmF5Y29uLmNvbYIUZ3JlYXRl
cmJheWRlc2lnbi5jb22CFGdyZWF0ZXJiYXloZWFsdGguY29tghFncmVhdGVyYmF5
c3BhLmNvbYIVZ3JlYXRlcmJheXRyYWRpbmcuY29tggpoaXBoZXAuY29tgg5ob3Vz
dG9ucGRyLmNvbYIVaHR0cHN0aGVwaXJhdGViYXkub3Jngg1paWFzZXJ2LmNvLnph
gg1panVtcHNhLmNvLnphgglqbnZzaC5vcmeCD2tvbXBhbmlvbmthLmNvbYINbGVv
cGFyZC5waXp6YYISbWFyc2hhbGxvbmxpbmUubWJhggptaWxhcHAub3JnghVtb2Jp
cmlzZWRldmVsb3Blci5jb22CCW5hcmxlaS5jYYIRbm9uZGlnZXN0aWJsZS5jb22C
Em9mZmljZS1zdG9yYWdlLmNvbYIUcGxhbnRiYXNlZHByb3RlaW4uY2GCDHByaXZh
dGUubW9kYYIScHJvcGhvbGRpbmdzLmNvLnphghJxdWVzdGlvbmdhbWluZy5jb22C
DHJhcGhhZWxsZS5jYYIMcmVkY3Jwc3Mub3JnggxyZWZjcm9zcy5vcmeCEHNhZmVj
YXNpbm8uY28uemGCEnNhbnRhLWNhdGFsaW5hLmNvbYIJdGhlaWUuY29tggp0aGVt
ZS5jbHVighV0aGVzb2NpYWxtZWRzd29yay5jb22CD3VzY21hcnNoYWxsLm1iYYIJ
dmFwZXRvLmNhgg92aXJhbG1vdmllcy5vcmeCCXZ1YmlpLmNvbYIJd3JldmUuY29t
gg53d3cuMTQ4OC5uaW5qYYIQd3d3LmFpbWFuYWdlci5jYYIUd3d3LmFudGlmYXNo
aW9uLmNsdWKCDHd3dy5hc2Vhbi5sYYIPd3d3LmJhcmJrb3BzLmNhghZ3d3cuYm9u
YWZpcmVyZWNvcmRzLmNhghp3d3cuYm9va2l0ZW50ZXJ0YWlubWVudC5jYYIQd3d3
LmJ1eHZhbHZlLmNvbYIUd3d3LmJ1eWFtZXJpY2FuLmNsdWKCGnd3dy5lbnRyZXBy
aXNlc2R1cXVlYmVjLmNhghF3d3cuZmluYWxjaWFsLm9yZ4IWd3d3LmZ1dHVyZWZs
aWdodC5jby56YYINd3d3LmdnYnMuYXNpYYIWd3d3LmdyZWF0ZXJiYXlhdXRvLmNv
bYIVd3d3LmdyZWF0ZXJiYXljb24uY29tghh3d3cuZ3JlYXRlcmJheWRlc2lnbi5j
b22CGHd3dy5ncmVhdGVyYmF5aGVhbHRoLmNvbYIVd3d3LmdyZWF0ZXJiYXlzcGEu
Y29tghl3d3cuZ3JlYXRlcmJheXRyYWRpbmcuY29tgg53d3cuaGlwaGVwLmNvbYIS
d3d3LmhvdXN0b25wZHIuY29tghl3d3cuaHR0cHN0aGVwaXJhdGViYXkub3JnghF3
d3cuaWlhc2Vydi5jby56YYIRd3d3LmlqdW1wc2EuY28uemGCDXd3dy5qbnZzaC5v
cmeCE3d3dy5rb21wYW5pb25rYS5jb22CEXd3dy5sZW9wYXJkLnBpenphghZ3d3cu
bWFyc2hhbGxvbmxpbmUubWJhgg53d3cubWlsYXBwLm9yZ4IZd3d3Lm1vYmlyaXNl
ZGV2ZWxvcGVyLmNvbYINd3d3Lm5hcmxlaS5jYYIVd3d3Lm5vbmRpZ2VzdGlibGUu
Y29tghZ3d3cub2ZmaWNlLXN0b3JhZ2UuY29tghh3d3cucGxhbnRiYXNlZHByb3Rl
aW4uY2GCEHd3dy5wcml2YXRlLm1vZGGCFnd3dy5wcm9waG9sZGluZ3MuY28uemGC
Fnd3dy5xdWVzdGlvbmdhbWluZy5jb22CEHd3dy5yYXBoYWVsbGUuY2GCEHd3dy5y
ZWRjcnBzcy5vcmeCEHd3dy5yZWZjcm9zcy5vcmeCFHd3dy5zYWZlY2FzaW5vLmNv
LnphghZ3d3cuc2FudGEtY2F0YWxpbmEuY29tgg13d3cudGhlaWUuY29tgg53d3cu
dGhlbWUuY2x1YoIZd3d3LnRoZXNvY2lhbG1lZHN3b3JrLmNvbYITd3d3LnVzY21h
cnNoYWxsLm1iYYINd3d3LnZhcGV0by5jYYITd3d3LnZpcmFsbW92aWVzLm9yZ4IN
d3d3LnZ1YmlpLmNvbYINd3d3LndyZXZlLmNvbTBMBgNVHSAERTBDMAgGBmeBDAEC
ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3ALIeBcyLos2KIE6H
ZvkruYolIGdr2vpw57JJUy3vi5BeAAABbru4hekAAAQDAEgwRgIhAJwE4PfXgXRL
ljRtPvDSRkEhGzgkeuoAhvP9Sk2u5JPgAiEAhbP0gaVnyTlGFBzBNM+TL7ZQPDyW
ynMQ+ROHGQfuGV0AdQDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAA
AW67uIfsAAAEAwBGMEQCIAstBEQodXgDo0rQxpxBav+KEn2hSs9OMyIWsCvMZBQF
AiBx1pOisglQ2OhBeXVTea5PKnK4FJOgNvVbidROFsG0ODANBgkqhkiG9w0BAQsF
AAOCAQEAJufOSO2EuVCs45e6SPYoiyQpZf++mFN0vHaFuuCQdoZ980V/EUG87d1H
5Xw9AyYo6hy/c9S9KlyH6oJV5aCfH+qOe55LhZyHsm6Q41eGZLc3tDHlzeX05iwM
SCw/NWWYenbYNhJVXQenkBknIJvMCnEeeaEUVB+9bb5eTwbqZfYgVzVGHn70ovAi
QuRzMR9yQWl/xk93LHqy0VzAVQrX90bvU8WHLpoxv27bxoSE/UtjqJhe0JQwMMod
ZBTY6015uTSQ9O8JYSu5fxddPSja+/oA7/tliOxg/gsecfFu6oiIWv5NrlyiXp9k
LO8dCsQFIsQ/Zcp0imOxssYe6GU2pA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PvEmJYuFDMNdVotWTot
hPOSdtIbh6H+lOzK2s62ZTWfxTkGQbpY/vGDGwGh7bsZay5ki/5R8cm0lm1EK51t
pdLZEZc4J9hPD2GsEfzpd6uYSd2jY0WO0xwCVAw7+IbnRTAkqcZVRdubMIQZkMEl
hopzsK18Hhe7a3w0/TtLh4da9aHG5Ep+E6BB9b/zvemFYswVu/+c3RiWkVGcyNw+
S081hwpliAc7gcll7lxkBnQZbefFrG18Q9TvqFmJCGmaWTDc5r7dWG7Wjf8r97Ty
Zb1o1699L13Wlpml3W0PuyLjfc21L1L9eol+A7NbCeP1zNof7qQTSaxDbEENFnnj
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306934120080116154531371301986684220896346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 08:51:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 08:51:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bonafirerecords.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29916391376942063395321410444068723248163450343811729208376615025044835141909440467851048166379005739784178180886500861648693129809004162682397979565115711990082486344262751604220575722305082418727605264092571935590095357888795572171713711258117515092617646789532199342155686305177183986197549908037787296263516802571245901128260039787156429605578182953230077778463964730513260597830070109229566851701559676712082491711384618081342556293175226562207997532664287780585521185085913944347057597332339646665887471672094210822159003740580714398568767818615503433359333166500422646181443948197369851322084141848013510927247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b31e58098da34cf5459f995d8e3789963cba6add
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1876 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1488.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimanager.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antifashion.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asean.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbkops.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonafirerecords.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookitentertainment.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buxvalve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyamerican.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprisesduquebec.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finalcial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futureflight.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggbs.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greaterbayauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greaterbaycon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greaterbaydesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greaterbayhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greaterbayspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greaterbaytrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiphep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonpdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httpsthepiratebay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iiaserv.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijumpsa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jnvsh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kompanionka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leopard.pizza'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshallonline.mba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobirisedeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narlei.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nondigestible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-storage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantbasedprotein.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.moda'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propholdings.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questiongaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raphaelle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcrpss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refcross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safecasino.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santa-catalina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesocialmedswork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscmarshall.mba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vapeto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viralmovies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vubii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wreve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1488.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimanager.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antifashion.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asean.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbkops.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonafirerecords.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookitentertainment.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buxvalve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyamerican.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.entreprisesduquebec.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finalcial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futureflight.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggbs.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterbayauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterbaycon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterbaydesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterbayhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterbayspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterbaytrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiphep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houstonpdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.httpsthepiratebay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iiaserv.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ijumpsa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jnvsh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kompanionka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leopard.pizza'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marshallonline.mba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobirisedeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.narlei.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nondigestible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.office-storage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantbasedprotein.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.private.moda'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propholdings.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.questiongaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raphaelle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redcrpss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refcross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safecasino.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santa-catalina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theme.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesocialmedswork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uscmarshall.mba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vapeto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viralmovies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vubii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wreve.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ebbb885e900000403004830460221009c04e0f7d781744b96346d3ef0d24641211b38247aea0086f3fd4a4daee493e002210085b3f481a567c93946141cc134cf932fb6503c3c96ca7310f913871907ee195d007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ebbb887ec000004030046304402200b2d044428757803a34ad0c69c416aff8a127da14acf4e332216b02bcc641405022071d693a2b20950d8e84179755379ae4f2a72b81493a036f55b89d44e16c1b438
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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