www.ruleandreason.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:de:c3:34:b0:7f:48:e2:91:12:d0:84:c0:77:61:7e:e1 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ruleandreason.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:de:c3:34:b0:7f:48:e2:91:12:d0:84:c0:77:61:7e:e1
Serial Number (int): 340578469102558977779781483333361787305697
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:a4:08:e5:a7:a5:6d:50:41:63:6e:c7:04:d5:5e:55:ed:ae:c5:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:12:ae:4e:4c:61:32:89:10:aa:41:25:6c:0a:31:4f:c6:0c:5d:34
Fingerprint (sha256): 6c:e6:83:5e:f8:d2:82:02:32:bd:ab:8a:b9:ec:33:b3:29:c9:35:42:da:45:b9:38:fe:33:f3:ca:c0:c2:c0:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ruleandreason.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ruleandreason.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.68stang.com
www.alternativelondonmagazine.com
www.annawwar.com
www.antoniofotographie.com
www.articlesdepo.com
www.bamfordyc.com
www.bestcelebnewsever.com
www.booksbeforebed.com
www.boycott35.com
www.bulldoghandymanandpaintingservice.com
www.cidinho-doca.com
www.consciousdownloads.com
www.cooltreivus.com
www.cpd-construction.com
www.criareproducoes.com
www.cumannwarszawa.com
www.cupcaketaste.com
www.dapperdakon.com
www.diagnosissinglemom.com
www.digitalshunya.com
www.dillisix.com
www.dota2clan.com
www.dyvallion.com
www.eieducators.com
www.espastas.com
www.euachodigno.com
www.eweekdays.com
www.fatlipandslimkidtre.com
www.fortress-strategy.com
www.furryanimalsohmy.com
www.getagirlfriendtonight.com
www.ghazalscouture.com
www.globalnetvideo.com
www.guess-a-sketch.com
www.holdem-wiki.com
www.hrrepka.com
www.humorheadbanger.com
www.igcp512.com
www.imagenfacebook.com
www.integratingalyse.com
www.interzone23.com
www.itmanagementresearch.com
www.kaiakihiro.com
www.kobushishukokai.com
www.laukarleung.com
www.manancialdasaguasvivas.com
www.maramkaire.com
www.marysource.com
www.megamixchannel.com
www.metrosherpa.com
www.midmichiganpatient.com
www.mimevintage.com
www.mycompanyurl.com
www.mymonstercreations.com
www.myresor.com
www.nathanhoag.com
www.newgadgetgeek.com
www.noticiastiempo.com
www.nycotbfacts.com
www.offshore-internationalfzc.com
www.pauldingfloodrelief.com
www.pietisticmonk.com
www.pinarlabizbize.com
www.postpartumdepressionguide.com
www.prefixmags.com
www.rajakapling.com
www.reggieiscrazy.com
www.reinventingtheheel.com
www.renddy.com
www.riverdistrictnews.com
www.ruleandreason.com
www.samedya.com
www.sarifair.com
www.sass-bc.com
www.sellersupportgroup.com
www.shreegkg.com
www.shuttershotsblog.com
www.simply-chic-parties.com
www.spotcardapp.com
www.struggle19.com
www.sunlandtoday.com
www.terraoptica.com
www.thalion-technologies.com
www.thegraduatemusic.com
www.thelensng.com
www.thenphl.com
www.theweekendteacher.com
www.timeclibsyn.com
www.topautomotivenews.com
www.trybeautytips.com
www.turismoenquisqueya.com
www.tweenloop.com
www.unibeonline.com
www.unwiredbrain.com
www.velshadow.com
www.vicmase.com
www.videoinputcc.com
www.website-optimization-service.com
www.wildwomanexpeditions.com
www.wilsonlawstl.com

Other certificates including the domain name ruleandreason.com

(limited to 100 certificates)
www.ruleandreason.com
www.ruleandreason.com
www.ruleandreason.com
www.ruleandreason.com
www.ruleandreason.com
www.ruleandreason.com
www.ruleandreason.com

Certificate

The complete raw certificate details for www.ruleandreason.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv41A7x6DnKjNHqXM4nU2
duyULh+3aCmYPZUF+GKS+5AO/nXTOJh3ouK7JXIKaRYdrS8/CN2T6A12X/4ecpw/
m9jtbw07lJzlrm6wlrhUL/xCsVyJBR4j9EsNkRLxFMfY3f+H5tAWwXUXoOuzYzCI
6L7Mng4ZJmVzSpvXPwRxsW6DXFnrvZYRisWo0bgdZmjHOMzDJMInRw6CwMyHhEyc
S7Og4Xozc6MH9CGN80+xxzVeBRbIP5yhoNLaUzolsh6ScSSuOI4Oxw8I75/u34Mv
xxy0G1AWQnWLk1dI2LOsPdgb03tvLk3S+fAVhHCk19L4+x/OY4TacfADI5rdFwzA
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340578469102558977779781483333361787305697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 17:31:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 17:31:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ruleandreason.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24181171018744900958750330368160188861850264568424781141943040481678336768399478830204082905601706851987336750445937882353686003741052083273853419560399877572644949853365583135798442669633495010161278812898817571095067556263560932238307856332902337883916274604594591532668799141307125908860682964466122768658927967925050816653172802895501630465619369116527459603350791829121683789778363946874822562323947866501286992890362766364499397879407514211849342195063590504098733450233071226652917104729935273445216096873634820601803026307243783627627539669439329126582592149666952788994828147455448058469571519212908364742667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cba408e5a7a56d5041636ec704d55e55edaec591
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2353 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.68stang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alternativelondonmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annawwar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antoniofotographie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.articlesdepo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bamfordyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestcelebnewsever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksbeforebed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boycott35.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bulldoghandymanandpaintingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidinho-doca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consciousdownloads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooltreivus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpd-construction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.criareproducoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumannwarszawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cupcaketaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dapperdakon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diagnosissinglemom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalshunya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dillisix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dota2clan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dyvallion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eieducators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espastas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.euachodigno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eweekdays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatlipandslimkidtre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortress-strategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.furryanimalsohmy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getagirlfriendtonight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghazalscouture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalnetvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guess-a-sketch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holdem-wiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrrepka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humorheadbanger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igcp512.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imagenfacebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.integratingalyse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interzone23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itmanagementresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaiakihiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kobushishukokai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laukarleung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manancialdasaguasvivas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maramkaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marysource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.megamixchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metrosherpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midmichiganpatient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mimevintage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycompanyurl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymonstercreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myresor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nathanhoag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newgadgetgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noticiastiempo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nycotbfacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshore-internationalfzc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pauldingfloodrelief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pietisticmonk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinarlabizbize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postpartumdepressionguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prefixmags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rajakapling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reggieiscrazy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reinventingtheheel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverdistrictnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruleandreason.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samedya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarifair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sass-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sellersupportgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shreegkg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shuttershotsblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simply-chic-parties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spotcardapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.struggle19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunlandtoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terraoptica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thalion-technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegraduatemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thelensng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenphl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theweekendteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timeclibsyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topautomotivenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trybeautytips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turismoenquisqueya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tweenloop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unibeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unwiredbrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velshadow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vicmase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videoinputcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.website-optimization-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildwomanexpeditions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilsonlawstl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b950e4c22000004030046304402202543a6716bbe696e634a031d3be5a89cb17613647be4469ecd88988ddee04fc402204f3be6e643ce3ee5a7d758286700fdb88b957bfdfd166e4f27ca2d541c930d1f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b950e4c400000040300473045022071208989c0395178343b989fbc26a9721c352f234937b637da6c0760ac533274022100f49c176196437fa579403aec1e726ae71d12f6791d3af911d4fed6315bf9d004
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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