www.aligntek.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:34:f5:1d:cd:fc:59:10:98:15:10:fa:f5:6d:60:e5:50:34 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.aligntek.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:34:f5:1d:cd:fc:59:10:98:15:10:fa:f5:6d:60:e5:50:34
Serial Number (int): 279357356488632771867892412317987938586676
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:ba:1e:36:11:9e:bd:1d:ce:7e:07:0a:31:1b:03:8c:38:0e:ff:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:7f:ac:6e:f4:d7:02:42:47:00:03:87:d0:c8:15:33:0f:fc:3b:ef
Fingerprint (sha256): 6b:22:62:d9:1c:e9:bf:33:32:99:16:62:5b:19:02:90:d1:14:ac:4d:29:4e:b2:d8:35:7b:fa:e1:74:88:a6:c7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.aligntek.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aligntek.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dagri.com
aligntek.com
astralhemp.com
biocillin.com
birthlawnetwork.com
boatumbrellas.com
camisoletop.com
crispystar.com
csgowettseiten.com
dallasstemcelldoctor.com
dawsonin.com
dlxiemill.com
donateausedcar.com
dwilawesq.com
dynashock.com
emilykaufman.com
emivar.com
ghyco.com
happybudtender.com
humberlands.com
identimaster.com
importero.com
indianastemcelldoctor.com
jnnco.com
jointpaindayton.com
louisianastemcelldoctor.com
makingthegamebook.com
minneopolissportsdoctor.com
mlyco.com
mommyskitchenhelper.com
mujco.com
nrlfootytip.com
nystemcellclinics.com
oglco.com
omni-corp.com
optilum.com
polylayer.com
rbjco.com
sfpickupsoccer.com
skwco.com
storybookgods.com
t2bp.com
teckfloor.com
thermalayer.com
tincturewater.com
triphaze.com
unideliver.com
volipermadrid.com
washableperiodpads.com
www.3dagri.com
www.aligntek.com
www.astralhemp.com
www.biocillin.com
www.birthlawnetwork.com
www.boatumbrellas.com
www.camisoletop.com
www.crispystar.com
www.csgowettseiten.com
www.dallasstemcelldoctor.com
www.dawsonin.com
www.dlxiemill.com
www.donateausedcar.com
www.dwilawesq.com
www.dynashock.com
www.emilykaufman.com
www.emivar.com
www.ghyco.com
www.happybudtender.com
www.humberlands.com
www.identimaster.com
www.importero.com
www.indianastemcelldoctor.com
www.jnnco.com
www.jointpaindayton.com
www.louisianastemcelldoctor.com
www.makingthegamebook.com
www.minneopolissportsdoctor.com
www.mlyco.com
www.mommyskitchenhelper.com
www.mujco.com
www.nrlfootytip.com
www.nystemcellclinics.com
www.oglco.com
www.omni-corp.com
www.optilum.com
www.polylayer.com
www.rbjco.com
www.sfpickupsoccer.com
www.skwco.com
www.storybookgods.com
www.t2bp.com
www.teckfloor.com
www.thermalayer.com
www.tincturewater.com
www.triphaze.com
www.unideliver.com
www.volipermadrid.com
www.washableperiodpads.com
www.xupiter.com
xupiter.com

Other certificates including the domain name aligntek.com

(limited to 100 certificates)
aligntek.com
aligntek.com
www.aligntek.com
www.aligntek.com
lailah.org
www.detoxdubai.com
ketofitmeals.store
www.emailboxmonitor.com
www.aligntek.com
aligntek.com
tinderconfessional.com
www.aligntek.com
breakhack.com
minneopolissportsdoctor.com
composite-rack.com
41349.com
substance--abuse.com
aligntek.com

Certificate

The complete raw certificate details for www.aligntek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66iQxz/ICUe69axVIFi/
YfpSZX+NvaKL66YZfkNIgMCZXeH8oYpnk73IOqRqpNxqQeQ2Za/Mh7nN0dMpFL9A
wdF4CQ3LE34sYnEMFb0i3aXAofaJLmI4kwDOC2Vye0pVi+N39WnLMWgqfJJAfsPw
Hg+HjBykxqAdpNzfV1QWC4cC3d3z8hs1ksCrrPnccX9lN/G0RfwvVplDmJ9NA5oP
TU20+j3kLtzs0JLgnwVuojYd0kZi7d4/AquFEiqMaRo0sQm9vx0PspNPhO2/DF+e
R1rgKnEdQVn754sBM2u7ViU3S/mCSIsdui9reOrv+3uD3Dsy60NAR1T039qF5/Rl
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279357356488632771867892412317987938586676
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-13 21:42:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 21:42:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aligntek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29749124432973959937971452969063439230404433437632764893064605238406486576241956541599016491055005054211972061356463185037498241938082576450207443017905856130897184287714875791502258946458871484519953009146752164202349309308655434700473377704113583155382120071623215476807341347840766683853584747849347408809931896456822634248781672205893586461435611724340112334057336351904028527257121618463261624436629907154050933482814030680804559699448908464758197063904760290805923664911803074270671193402102526540635719524155128625221741602877708074087081983369409071234124971577890241104375856730919403413780787006611597321669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1ba1e36119ebd1dce7e070a311b038c380eff0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1914 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dagri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aligntek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astralhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocillin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthlawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatumbrellas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camisoletop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crispystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csgowettseiten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasstemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dawsonin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlxiemill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donateausedcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwilawesq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynashock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emilykaufman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emivar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happybudtender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humberlands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identimaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'importero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianastemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jnnco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpaindayton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianastemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makingthegamebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minneopolissportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mommyskitchenhelper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mujco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrlfootytip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nystemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oglco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omni-corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optilum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polylayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbjco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfpickupsoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybookgods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't2bp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teckfloor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermalayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tincturewater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triphaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unideliver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volipermadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washableperiodpads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dagri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aligntek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astralhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocillin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birthlawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boatumbrellas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camisoletop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crispystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csgowettseiten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dallasstemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dawsonin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlxiemill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donateausedcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dwilawesq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynashock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emilykaufman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emivar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happybudtender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humberlands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.identimaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.importero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianastemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jnnco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpaindayton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisianastemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makingthegamebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minneopolissportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mommyskitchenhelper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mujco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nrlfootytip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nystemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oglco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omni-corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optilum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polylayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbjco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfpickupsoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storybookgods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.t2bp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teckfloor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermalayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tincturewater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.triphaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unideliver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volipermadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washableperiodpads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xupiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xupiter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bed80ee92000004030047304502202753d519c481d0ea1c1ec5bb8ca7b8b8cd7ea41c486671e662b89e40e643105a0221009d96ea5346ea04fdb3e541d2a48ede5b9f5b571e75b371e227a2f2417dc375d5007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bed80ee5d0000040300483046022100f4fb115196828a354b21810b66ab268a713d511e01d56a0fda28305fd0568f2e022100a643a57ce8d0274c050f239dbd745715b97da3914bf69fb7047e9ab4a5306f7d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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