parsimonia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a7:4a:5d:7c:e8:ef:a5:aa:2b:65:2e:a1:db:70:9d:7f:82 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=parsimonia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a7:4a:5d:7c:e8:ef:a5:aa:2b:65:2e:a1:db:70:9d:7f:82
Serial Number (int): 405375147291607529248270292312075523686274
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f6:04:d5:1d:c0:4c:b7:87:ae:65:e9:1c:7a:42:44:c9:9e:8a:4e:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:e6:37:50:bb:8e:ec:19:1a:47:ad:ca:c1:8d:36:3f:7e:e4:4f:c5
Fingerprint (sha256): 6d:7c:37:7d:21:67:46:0e:56:36:b6:1c:05:4c:1f:3d:94:c2:e5:61:1a:51:d9:c3:46:f8:5e:8a:4e:bb:37:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate parsimonia.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for parsimonia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dprintstations.com
7e7.com
aereomobili.com
aereoplano.com
aleare.com
american-single.com
cabron.net
canarie.com
cartecredito.com
cptbc.com
dentalasst.com
dichiarazioni.com
dietaparaemagrecer.com
divini.com
elopementpackages.com
fabbriche.com
forexlight.com
geheimratsecken.com
gondolaguide.com
handylogoz.com
hdpin.com
hoogh.com
kquest.com
lamorgese.com
lulubaby.com
merate.com
modaintimo.com
monroepcs.com
montaldo.com
myvips.com
oogle.net
oralmente.com
orthopaedist.net
otts.org
paisiello.com
palmarosa.com
parsimonia.com
peth.net
radiocassette.com
sharingvideo.com
spokaneluxuryhomes.com
studioruggieri.com
surplusdirect.com
www.3dprintstations.com
www.7e7.com
www.aereomobili.com
www.aereoplano.com
www.aleare.com
www.american-single.com
www.cabron.net
www.canarie.com
www.cartecredito.com
www.cptbc.com
www.dentalasst.com
www.dichiarazioni.com
www.dietaparaemagrecer.com
www.divini.com
www.elopementpackages.com
www.fabbriche.com
www.forexlight.com
www.geheimratsecken.com
www.gondolaguide.com
www.handylogoz.com
www.hdpin.com
www.hoogh.com
www.kquest.com
www.lamorgese.com
www.lulubaby.com
www.merate.com
www.modaintimo.com
www.monroepcs.com
www.montaldo.com
www.myvips.com
www.oogle.net
www.oralmente.com
www.orthopaedist.net
www.otts.org
www.paisiello.com
www.palmarosa.com
www.parsimonia.com
www.peth.net
www.radiocassette.com
www.sharingvideo.com
www.spokaneluxuryhomes.com
www.studioruggieri.com
www.surplusdirect.com
www.yupichat.com
yupichat.com

Other certificates including the domain name parsimonia.com

(limited to 100 certificates)
westcoastcanada.com
www.corsidinformatica.com
www.parsimonia.com
matthewshepherd.com
parsimonia.com
parsimonia.com
www.parsimonia.com
parsimonia.com
34176.com
parsimonia.com
parsimonia.com
www.parsimonia.com
www.parsimonia.com
www.parsimonia.com
parsimonia.com
www.parsimonia.com
parsimonia.com

Certificate

The complete raw certificate details for parsimonia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf9x/xDhycvk+FEkr1uc
mQhAA1HCNfA+YOAvfA/quRIL8aEaXmxGVvQ4Xxf60th/ncfBWkUTRWCKKyRpqoHI
zxrIJw1eaxINNQTz1q0CWmRafgbPKK87vTmnuKgxi49WoCvx5c1cg+SnCXrhUHVg
Lm2b5XjBzXeofhFy/CtiRJhbFGRbqQm/7kEOiwVt9q2tc8O/MIBFGblWO+SXEEPt
CfGl0vW5/LMYLLHZzqcxf1PG8fryi8ju3Q9z4XAi+0PNdhkCFaYA+flp78+SA9Ed
u/HY4jjtw7saDXDXZqHHXTO5BHLrDDTXGIgbpgucD8SDe6xPfNOzBajs/lvOFkgI
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405375147291607529248270292312075523686274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 08:09:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 08:09:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'parsimonia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21965191530465282708853786547542680122222725697390725808073035728964597894574933166408549986860698487113332417639009372264569884338717223550196634770175761844818252640152365532917873343812792318557913533845237507476494595442282273763818592204679762954279356038630100683354507708735571885789883198736367455993653864764969267457718783274134330090876282896979978386589125927484949035747895800453546890170033334655600973798113172803206704593755536701079728356665983446074596895839854462823825163355567136394370051393624104762531855625349100648123785135594070831013106585748800974013834680767296358346063043905044854868027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f604d51dc04cb787ae65e91c7a4244c99e8a4e64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1552 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dprintstations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7e7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aereomobili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aereoplano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aleare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'american-single.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canarie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartecredito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cptbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalasst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dichiarazioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dietaparaemagrecer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elopementpackages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabbriche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geheimratsecken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gondolaguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handylogoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdpin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoogh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamorgese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lulubaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modaintimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monroepcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montaldo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myvips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oogle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oralmente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthopaedist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paisiello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmarosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsimonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiocassette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharingvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spokaneluxuryhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioruggieri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surplusdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dprintstations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.7e7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aereomobili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aereoplano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aleare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.american-single.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canarie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartecredito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cptbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentalasst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dichiarazioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dietaparaemagrecer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elopementpackages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabbriche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forexlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geheimratsecken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gondolaguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handylogoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdpin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoogh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lamorgese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lulubaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.modaintimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monroepcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montaldo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myvips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oogle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oralmente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orthopaedist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paisiello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmarosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parsimonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiocassette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharingvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spokaneluxuryhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studioruggieri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surplusdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yupichat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yupichat.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001710180b8bc000004030046304402205b9986e642ad5fc916cf42743f661e94ab82eb8482f8f81375d407cb8898943a022011addb3838302eeeb0c7c999739883b971cba10594b0166864b229fdd0a7351700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001710180b8f80000040300473045022023ec628d702001bc4044508ab759cbdd1140243520e6b24ad78a5c0e7ada1387022100ad04ac4ee9f2b6b3b2b29d266ecae8e0018eae08d6ff2893df27e2587ea886d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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