indiva.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:14:2b:ff:29:68:8e:02:4c:df:9f:1b:e6:93:ea:c4:cd:6b was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=indiva.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:14:2b:ff:29:68:8e:02:4c:df:9f:1b:e6:93:ea:c4:cd:6b
Serial Number (int): 355313272744839905922816419496834801913195
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 47:2e:ab:7a:9e:d6:2a:ad:6a:bb:4f:7a:cb:d3:56:1c:60:36:8d:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:ed:15:9d:97:26:7c:77:5f:d8:45:fd:48:96:63:f5:cb:97:26:58
Fingerprint (sha256): 6b:fd:ec:b0:87:e1:d6:f5:93:0c:4f:2f:1a:4b:df:3e:f2:f8:80:e2:00:e9:e8:b7:8e:0a:d3:26:20:4b:e8:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate indiva.org

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for indiva.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0tf.com
4myprize.com
5bd.com
abortionbarbie.com
agcarhire.com
antiperdida.com
apkvonda.com
atomspeed.com
avisionofelegance.com
baybanks.org
bestpoweronline.com
cadenceneuroscience.com
caseykey-realestate.com
complete-game.com
controlinteligente.com
dearbornautocare.com
djbaltimore.com
douugh.org
driveself.com
equalizerflangespreaders.co.uk
esperame.com
finewinestore.com
firstchristiancb.com
fsbbank.org
genapsys.org
getmethishome.com
getrole.com
goodvenisonsausage.com
igotmineonline.com
indiva.org
inshur.org
january.digital
kaufstore.com
kentuckyhud.com
kozyhomebytheshore.com
lakelandbank.org
leapdaycare.com
lotterymaximize.com
loudounlawncare.com
mainehud.com
matricularse.com
miningframe.com
mmmcheese.com
morebynature.com
mortgagescene.com
munnsville.com
musicsale.com
nameloupe.com
namereef.com
noisyinboise.com
ocbccentre.com
onetyone.com
originbank.org
packageforce.com
paducahkyrealestate.com
photostate.com
pocketlanguage.com
pocketpills.org
points4free.com
radiusnetworks.org
railfanconcierge.com
religious-storehouse.com
roevwade.com
runsuntilsold.com
saintflanaganinstitute.com
searchliterature.com
secondverse.com
seleccioname.com
seocertificate.com
shaadic.com
sledforsale.com
smartseosoftware.com
sparkedge.com
stylemadesimple.com
sumof.com
taxlawbyzipcode.com
teacherapple.com
theplanoinsurance.com
thinksuite.com
traackr.org
transompod.com
trashclearance.com
treenwarebyhand.com
tvhealthyhome.com
usatech.org
utilityscalestorage.com
visiblemente.com
vivoj.org
vndly.org
wageandhourlawbyzipcode.com
webchannelmodule.com
www.animalmate.com.animalmate.com
www.jumboolive.com
www.mgfuture.com
www.spidde.com
www.teachrapid.com
www.unowolf.com
yardehouse.com
zwdia.com

Other certificates including the domain name indiva.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for indiva.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRl/JD6a6uIa1Jwsa8VV
cnES6BtIo6B7ovMsLPrQ+RhWI3nBLBfo44arssJ9L/UpBt1kxt3C7ZEPz3kALxsI
zhW7trR3QYl0GVoLzSW/TDeJqnYo3rYS9lCqH0yDo9GQv4KzXhTJ5aYDY8AYMz+J
1DwQyBS6dRqtwBlXsxZwu+ALTMYn8HGv2GRbh1BY4DggJEU1ttiJZ7eq+3fx5D9o
qyEgZVWwrOqV0teawZh8fchHWfT1zsBNBXW9ek6u+ljN2x4sDaYVDJPzT2LT7tc4
l42YJ0RHqSo0ExFAIrEzE9bNbarww8WnPAljRnZjQrL4P6Ttx50jqM16MqNH3qEa
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355313272744839905922816419496834801913195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 05:39:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 05:39:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indiva.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25891425383175194254427921451986438464629320840570997383833316135924428320232395036571521194476299545214504668483312816170561501030715920504157260529046686283342267852648216846541122859948192718074940967398166879063602618645274526774663428612055156613683327901644406354070050804567451777912619906279613378870836412635148063375071396303562249750845948671997466792118700034969211835949030812883374910128307113177825250598331421034634365141641614524832935956011247939734734865199418510628940823652887656704483738967802784680593369132702313921303314028689633153606282774812806875965881580883525428791249262618092347923027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							472eab7a9ed62aad6abb4f7acbd3561c60368d2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1790 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0tf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4myprize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5bd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abortionbarbie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcarhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiperdida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apkvonda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomspeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avisionofelegance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baybanks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpoweronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadenceneuroscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caseykey-realestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'complete-game.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlinteligente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dearbornautocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djbaltimore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'douugh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driveself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalizerflangespreaders.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esperame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finewinestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstchristiancb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsbbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genapsys.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmethishome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getrole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodvenisonsausage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igotmineonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inshur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'january.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaufstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckyhud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kozyhomebytheshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakelandbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapdaycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotterymaximize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loudounlawncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainehud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matricularse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miningframe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmmcheese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morebynature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagescene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munnsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nameloupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namereef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noisyinboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocbccentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetyone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packageforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paducahkyrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photostate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pocketlanguage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pocketpills.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points4free.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiusnetworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'railfanconcierge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religious-storehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roevwade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runsuntilsold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintflanaganinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchliterature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seleccioname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seocertificate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaadic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sledforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartseosoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stylemadesimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxlawbyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacherapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theplanoinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinksuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traackr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transompod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trashclearance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treenwarebyhand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvhealthyhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usatech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utilityscalestorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visiblemente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivoj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vndly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wageandhourlawbyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webchannelmodule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.animalmate.com.animalmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumboolive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teachrapid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unowolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yardehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwdia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001711591093e0000040300473045022100d7347b66a5acd2644b6363c440908d995963fa222691470dd18457fd64f4ff9602202c0beb117bcb552fe00bb4f0d3276710c9d916340027890aada18dc611476de6007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001711591094700000403004830460221009205f22e15b4103591a84a5d6237e20ac5c1e71ac84354497b20db58ea52c079022100aee09743478c51910efea8dadac686f05ef0834792580d1966ae6191ebcf9501
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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