communityasset.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:66:a6:21:65:a8:af:0d:e2:6e:b5:da:ef:95:6a:93:33:fe was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=communityasset.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:a6:21:65:a8:af:0d:e2:6e:b5:da:ef:95:6a:93:33:fe
Serial Number (int): 296266484476200968830616264881756290888702
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:6a:de:6a:f4:ea:e9:ff:60:8a:8d:d4:56:f2:b4:dd:69:83:97:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:f4:66:10:f8:b8:f7:c1:03:fc:b9:08:4e:d1:cd:10:54:d4:45:ac
Fingerprint (sha256): 6e:aa:02:d0:1d:29:31:04:4c:18:bb:ea:3d:57:2d:c2:20:e8:89:b3:b5:0d:05:83:90:5c:6c:6b:51:86:d3:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate communityasset.net

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for communityasset.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbitrageplus.com
assetmanagementsoft.net
berlinsart.com
berlinsarts.com
bertbrecht.net
chinaredlight.net
clubbolly.com
cognitivesoft.net
communityasset.net
creativeasset.net
criminaltheft.net
economyflight.net
explorationyacht.net
exploreryacht.net
firefightingaircraft.net
ghazaouet.net
hokibitcoin.com
intermodalfreight.net
investigatingcriminaltheft.net
luxuryflight.net
malagastyle.com
marinesgov.com
maritimefreight.net
menfight.net
militarygradelight.net
militarysealift.net
minhtuyet.net
monetarytheft.net
museumoflight.net
nihonbitcoin.com
offshorelift.net
pilotflight.net
prideintheircraft.net
rilsoft.net
riskinsurance.net
shipaircraft.net
solarasset.net
solarpoweredyacht.net
solarpowerflight.net
solarpoweryacht.net
southkoreastyle.com
studentloansoft.net
teesport.com
ufocraft.net
undervaluedasset.net
viennapost.com
vipflight.net
vipworkout.com
www.arbitrageplus.com
www.assetmanagementsoft.net
www.berlinsart.com
www.berlinsport.com
www.bertbrecht.net
www.chinaredlight.net
www.clubbolly.com
www.cognitivesoft.net
www.communityasset.net
www.creativeasset.net
www.criminaltheft.net
www.economyflight.net
www.explorationyacht.net
www.exploreryacht.net
www.firefightingaircraft.net
www.gasdomainmarkets.com
www.ghazaouet.net
www.hokibitcoin.com
www.intermodalfreight.net
www.investigatingcriminaltheft.net
www.korikibitcoin.com
www.luxuryflight.net
www.marinesgov.com
www.maritimefreight.net
www.menfight.net
www.militarygradelight.net
www.militarysealift.net
www.minhtuyet.net
www.monetarytheft.net
www.museumoflight.net
www.offshorelift.net
www.pilotflight.net
www.prideintheircraft.net
www.rilsoft.net
www.shipaircraft.net
www.solarasset.net
www.solarpoweredyacht.net
www.solarpowerflight.net
www.solarpoweryacht.net
www.southafricastyle.com
www.southkoreastyle.com
www.studentloansoft.net
www.teesport.com
www.ufocraft.net
www.undervaluedasset.net
www.vipflight.net

Other certificates including the domain name communityasset.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for communityasset.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwSAlfHLsJn8OW9F5sO0
PslhWxzGTrMFIvSwTBx5vhjpSuYCS6C56oHgjc0NeN40+5kS84NFSk2F6OAaZeTC
uTLUhfL9rfEzIh60NEb72B29fJysIoqK2Hu9N06Ynhf/3lxZeQ9id5Q0NiOjphOK
U1Atlb/DUW9WKqfx0i11HD1tQkQPGLtDaJfPHRWR5ZAz1kHzkSD66NPEC6jEOmp2
dKZxGPwVGACjH+xG5By2m820KzW2zR4orljLKv9fYNBQX+H2/CfL6kdd/n7C8SKL
Ppy0u2gBdC/rudQTJT10D7fbAFjp8dd2Q5K6bMtUHwi/vBL4mrycHCUkPdEcuiPH
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296266484476200968830616264881756290888702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-01 10:35:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-30 10:35:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'communityasset.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24113736409462581104772580135167009152433058659183776404570251339246586738181298663566872516610853502538317854313456118406268197369296239881170334810054767196725151981704862682830336270741099054609858619619403242881778394252369675555319964446008079665384479259455353454891881226029058256252384654314839729214765974728211641009805597234192492041617816051615934336271736060038575793894805402701050322845905902450833880828505715405651396398975400330968157646605828231802416870724836782102216478738030867278635532636984605900717767303886560250961192347863755040217989697739800730529583414367949154488764779745180058372007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e16ade6af4eae9ff608a8dd456f2b4dd69839766
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1981 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagementsoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinsarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bertbrecht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaredlight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubbolly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognitivesoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityasset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativeasset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criminaltheft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economyflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explorationyacht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploreryacht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firefightingaircraft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghazaouet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokibitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermodalfreight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investigatingcriminaltheft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuryflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malagastyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinesgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritimefreight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menfight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militarygradelight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militarysealift.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minhtuyet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monetarytheft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museumoflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nihonbitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorelift.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilotflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prideintheircraft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rilsoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskinsurance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipaircraft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarasset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarpoweredyacht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarpowerflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarpoweryacht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southkoreastyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentloansoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teesport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufocraft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undervaluedasset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viennapost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipworkout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arbitrageplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetmanagementsoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinsport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bertbrecht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaredlight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubbolly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cognitivesoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communityasset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creativeasset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.criminaltheft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economyflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorationyacht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exploreryacht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firefightingaircraft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gasdomainmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghazaouet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokibitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intermodalfreight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investigatingcriminaltheft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.korikibitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxuryflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marinesgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maritimefreight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menfight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.militarygradelight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.militarysealift.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minhtuyet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monetarytheft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museumoflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorelift.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pilotflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prideintheircraft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rilsoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipaircraft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarasset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarpoweredyacht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarpowerflight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarpoweryacht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southafricastyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southkoreastyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentloansoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teesport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ufocraft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.undervaluedasset.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vipflight.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164f5459d8b0000040300483046022100ebd20f9f8b9fc30b4d7f42b5e11c098c41df3ac6957d345f0c97b902c58569500221009bd369d311185b56ab8da16f8a3a9759936c2bcdd96808eb93037274a8ca606c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000164f5459e590000040300473045022100d955cd7031e97bdeb6050322e5a20ec06a8227e5f60064bb5f561610e35326f502204ffe58530f72055881b584371e834926e735825e4ba4307245dfaf6afdb62300
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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