lightsteps.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:94:fa:7b:cf:e1:be:2b:cb:5f:9a:f0:ad:23:39:58:d6:51 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lightsteps.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:fa:7b:cf:e1:be:2b:cb:5f:9a:f0:ad:23:39:58:d6:51
Serial Number (int): 312031597967383440902160955454742322533969
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:1b:21:4a:43:0b:b8:e5:a4:3f:99:78:52:88:99:9d:01:de:f5:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5f:f6:73:b2:a0:76:af:5c:19:ff:33:d3:d0:0c:04:eb:d5:a9:cb:d1
Fingerprint (sha256): 6e:03:a4:8e:e0:fb:87:61:36:6e:cd:82:61:90:98:8a:04:67:33:9e:c3:5f:23:b5:f3:da:0b:38:01:50:95:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lightsteps.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lightsteps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dxtv.com
adwordalerts.com
arvreport.com
autobionth.com
broadwayblockchain.com
buddhanecklace.com
bullshitas.com
businessshanghai.com
callmebyyourusername.com
contadores.mex.com
cool-daddy.com
dream-meaning.com
elittlerock.com
financingoption.com
hodlieo.com
homeownerslist.com
joint-pains.com
josecarreras.com
lajollabeachfront.com
lectinlow.com
leed.world
lightsteps.com
louisianaprp.com
lowcostreversemortgage.com
maxsecuritysolutions.com
military-gun-cases.com
milwaukeestemcelldoctors.com
naururealestate.com
neoplane.com
nikichow.com
nikolaoshalkitis.com
ohhco.com
phragmitecontrol.org
polycane.com
polywarm.com
primarylight.com
rackfloor.com
recomatic.com
rgyco.com
richiedo.com
sanicast.com
siouxcitystemcelldoctors.com
stemcellgreenbay.com
tactilesports.com
thermalvest.com
uaico.com
unheadway.com
uunco.com
work-gear.com
www.3dxtv.com
www.adwordalerts.com
www.arvreport.com
www.autobionth.com
www.broadwayblockchain.com
www.buddhanecklace.com
www.bullshitas.com
www.businessshanghai.com
www.callmebyyourusername.com
www.contadores.mex.com
www.cool-daddy.com
www.dream-meaning.com
www.elittlerock.com
www.financingoption.com
www.hodlieo.com
www.homeownerslist.com
www.joint-pains.com
www.josecarreras.com
www.lajollabeachfront.com
www.lectinlow.com
www.leed.world
www.lightsteps.com
www.louisianaprp.com
www.lowcostreversemortgage.com
www.maxsecuritysolutions.com
www.military-gun-cases.com
www.milwaukeestemcelldoctors.com
www.naururealestate.com
www.neoplane.com
www.nikichow.com
www.nikolaoshalkitis.com
www.ohhco.com
www.phragmitecontrol.org
www.polycane.com
www.polywarm.com
www.primarylight.com
www.rackfloor.com
www.recomatic.com
www.rgyco.com
www.richiedo.com
www.sanicast.com
www.siouxcitystemcelldoctors.com
www.stemcellgreenbay.com
www.tactilesports.com
www.thermalvest.com
www.uaico.com
www.unheadway.com
www.uunco.com
www.work-gear.com
www.xytxw.com
xytxw.com

Other certificates including the domain name lightsteps.com

(limited to 100 certificates)
www.africacallertunes.com
www.preceptsbiblestudy.com
basicbrandless.com
lightsteps.com
brain-vitamins.com
www.opruge.com
www.homosubsapiens.com
121.world
lightsteps.com
www.estateandspecialneedstrusts.com
www.aeratorpumps.com
www.padrefans.com
lightsteps.com
scaffoldingplatforms.com
cedarbarns.com
retrocaravans.com
www.castbit.com
www.ashitabaplantforsale.com
www.parkcityhistoricmainstreet.com
www.4dhabitats.com
head-lights.com
www.electronicselectronics.com
exotic-flowers.com
www.sesame-oil.com
www.rapallo.org

Certificate

The complete raw certificate details for lightsteps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLruj9yyN3jAWDi8jk6N
tEwK71wSbMkQsKfDtkdLP+RPruE4owXRnKPvMrWPu8kk+x5LwHVFN9FBHqKKpmjG
hgMV9fbshZ9ZoZ87WVk5j/YSAlgz6f/BTyZ9ddmwCkLuzqi+2rSonjHtmGH15iFw
/Ku82+NRRBPUWb4fR09hTxRNracxPClCrsLQUZ32myhU8RjWP4a9UUj+bxSz5V6a
f+qf7Oio+t4+EI1Zcg8c5yC3QXUSXoCX0N3+KVR0q9udBLhD4KECCovHX61aAMBo
nVV3kzhEts5otmEtXRZ+WyHuEth2pNQBVoiaPYJeanG9/PrA4+LmnRqW9XK+s8n7
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312031597967383440902160955454742322533969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-01 22:20:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 22:20:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lightsteps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24834887320266565166553529532162726314482001780131227446354303920642980498947869930388086247469650791907243275838035366427185297053448759246182343075645793955314614054513954806493417834147838623540829535946443191705652393210768541670498923836353146826145121713694559244788438130632441920547901129710652968176136208490926024192053408241482732175285973891956627260158446403117163988814958796179017130092698231984024637902147103718566927806862000159546906241212873849066156644586090334057051954677391959046416280740879571586258772829917350113717828200142130149354721656452407579741340647981462011380900326650206826920751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d1b214a430bb8e5a43f99785288999d01def549
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1986 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dxtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adwordalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autobionth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadwayblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddhanecklace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullshitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callmebyyourusername.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contadores.mex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cool-daddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dream-meaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elittlerock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financingoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hodlieo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeownerslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joint-pains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josecarreras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajollabeachfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lectinlow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leed.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightsteps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianaprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowcostreversemortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxsecuritysolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'military-gun-cases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milwaukeestemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naururealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neoplane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikichow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikolaoshalkitis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohhco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phragmitecontrol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polycane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polywarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarylight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rackfloor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recomatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richiedo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanicast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siouxcitystemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellgreenbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tactilesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermalvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uaico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unheadway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uunco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'work-gear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dxtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adwordalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arvreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autobionth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadwayblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddhanecklace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullshitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businessshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callmebyyourusername.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contadores.mex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cool-daddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dream-meaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elittlerock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financingoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hodlieo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeownerslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joint-pains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.josecarreras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lajollabeachfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lectinlow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leed.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightsteps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisianaprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowcostreversemortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maxsecuritysolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.military-gun-cases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milwaukeestemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naururealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neoplane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nikichow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nikolaoshalkitis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohhco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phragmitecontrol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polycane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polywarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarylight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rackfloor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recomatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rgyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richiedo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanicast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siouxcitystemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellgreenbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tactilesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermalvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uaico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unheadway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uunco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.work-gear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xytxw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xytxw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bafd6b4370000040300473045022100e692a41c5a18e395bbdeb4447ee95ac2e7edb550ae8196c20dced871ba2f14ab022041b419314aa75d7c26df8f553e2162f1588679933d00f739d99fff584f3719f0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bafd6b30d0000040300483046022100b23a58da8a0e43bdeb275441fa443972f243e8c250a7cb26b6dffbe3e4a5ea1402210081da058a8df93c7a203c2f8f71868b2af9bbe1bce68ac423cf4b6291895824f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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