www.bessenlaw.com

Issued by R3

About this certificate

This digital certificate with serial number 04:aa:e7:9a:5a:0d:85:c3:03:11:95:38:cd:eb:ed:56:45:37 was issued on by Let's Encrypt.

With 69 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.bessenlaw.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:aa:e7:9a:5a:0d:85:c3:03:11:95:38:cd:eb:ed:56:45:37
Serial Number (int): 406604999210831283008033139360074382591287
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dc:e6:13:f5:be:5d:fa:01:cd:5c:ed:21:21:ee:9f:04:2e:55:75:05
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6d:35:04:02:a1:e1:af:d2:67:d0:97:f6:16:b6:c8:b1:51:4b:e5:d0
Fingerprint (sha256): 71:d2:02:18:73:79:c3:52:c0:72:83:1a:27:aa:10:59:14:07:94:b5:b9:a4:a0:b6:ea:dc:d8:4d:98:b5:ed:76

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bessenlaw.com

69

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bessenlaw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

answertitle.com
arktitletexas.com
bessenlaw.com
bottomlinedashboard.com
cleartitleservices.com
closewithlegacy.com
empiretitleidaho.com
expresstitlecs.com
flaggcreektitle.com
flagshiptitle.com
fotilawfirm.com
goldenabstract.agency
gracechunlaw.com
greenacreabstract.com
haywardtitlegroup.com
heartlandtitlecompany.com
jacksonlawnc.com
larreaandortega.com
legallegacy.com
localwebdesigncompany.com
mbtitle.com
northporttitle.com
paradisetitleinc.com
paradisetitlestaug.com
paramounttitlenm.com
partnertitle.com
precisetitle.com
rtrtitle.com
titlepremiumcalculator.com
titlesf.com
truelinetitle.com
tstitleflorida.com
valorabstract.com
valortitleagency.com
wilsonhamilton.com
www.answertitle.com
www.arktitletexas.com
www.bessenlaw.com
www.bottomlinedashboard.com
www.cleartitleservices.com
www.closewithlegacy.com
www.empiretitleidaho.com
www.expresstitlecs.com
www.flaggcreektitle.com
www.flagshiptitle.com
www.fotilawfirm.com
www.goldenabstract.agency
www.gracechunlaw.com
www.greenacreabstract.com
www.haywardtitlegroup.com
www.heartlandtitlecompany.com
www.jacksonlawnc.com
www.larreaandortega.com
www.legallegacy.com
www.localwebdesigncompany.com
www.mbtitle.com
www.northporttitle.com
www.paradisetitleinc.com
www.paradisetitlestaug.com
www.paramounttitlenm.com
www.partnertitle.com
www.precisetitle.com
www.titlepremiumcalculator.com
www.titlesf.com
www.truelinetitle.com
www.tstitleflorida.com
www.valorabstract.com
www.valortitleagency.com
www.wilsonhamilton.com

Other certificates including the domain name bessenlaw.com

(limited to 100 certificates)
www.protitlemi.com
www.rtrtitle.com
www.localwebdesigncompany.com
www.paradisetitleinc.com
www.northporttitle.com
www.bessenlaw.com
www.protitlemi.com
www.localwebdesigncompany.com
www.localwebdesigncompany.com
www.bessenlaw.com
www.jacksonlawnc.com
www.jacksonlawnc.com
www.localtitle.com
www.jacksonlawnc.com
www.localwebdesigncompany.com
www.protitlemi.com
www.bessenlaw.com
www.jacksonlawnc.com
www.northporttitle.com
www.localwebdesigncompany.com
www.bessenlaw.com
www.jacksonlawnc.com
www.localwebdesigncompany.com
www.jacksonlawnc.com
www.gracechunlaw.com
www.jacksonlawnc.com
www.protitlemi.com
www.expresstitlecs.com
www.wilsonhamilton.com
www.localwebdesigncompany.com
www.jacksonlawnc.com
www.localwebdesigncompany.com
www.rtrtitle.com
www.rtrtitle.com
www.localwebdesigncompany.com
www.rtrtitle.com
www.localwebdesigncompany.com

Certificate

The complete raw certificate details for www.bessenlaw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK5jCCCc6gAwIBAgISBKrnmloNhcMDEZU4zevtVkU3MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDYxODQ2NTRaFw0yNDA4MDQxODQ2NTNaMBwxGjAYBgNVBAMT
EXd3dy5iZXNzZW5sYXcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0U2TLNyeeP3UluDPdlzseXQUkoYhP0HOOGd1B9osbEVTvw4HhXy5DCzGsyrm
VHVPYXMv1LsEgAOHdzKayKSAoI+ht3XTA/fzkk7Z2r70HH8IQuSs0Grz31eGlMqt
pwbbeSIWzc3SBfQyo/oIgb0zcK3ht1K40cfCMk9Oo0WoDT96u2ZzAV/u+CdDP7VY
mDo3LkdQWghvdqeup6DUJf91lZvflD3M/bx/TZgv1gSkouCnJaPYKCWnz6lh+zyv
WVv7+W2oIiPNbeCQFTvDQ3XQPK7kUYHJyoe/8IxgPTIs59Jc5Ga45WIq9VGoQLuN
J//fA40jbq1+ufZ17ag1GjBYBQIDAQABo4IICjCCCAYwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBTc5hP1vl36Ac1c7SEh7p8ELlV1BTAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCCBhEGA1UdEQSCBggwggYEgg9hbnN3ZXJ0aXRsZS5jb22CEWFya3RpdGxl
dGV4YXMuY29tgg1iZXNzZW5sYXcuY29tghdib3R0b21saW5lZGFzaGJvYXJkLmNv
bYIWY2xlYXJ0aXRsZXNlcnZpY2VzLmNvbYITY2xvc2V3aXRobGVnYWN5LmNvbYIU
ZW1waXJldGl0bGVpZGFoby5jb22CEmV4cHJlc3N0aXRsZWNzLmNvbYITZmxhZ2dj
cmVla3RpdGxlLmNvbYIRZmxhZ3NoaXB0aXRsZS5jb22CD2ZvdGlsYXdmaXJtLmNv
bYIVZ29sZGVuYWJzdHJhY3QuYWdlbmN5ghBncmFjZWNodW5sYXcuY29tghVncmVl
bmFjcmVhYnN0cmFjdC5jb22CFWhheXdhcmR0aXRsZWdyb3VwLmNvbYIZaGVhcnRs
YW5kdGl0bGVjb21wYW55LmNvbYIQamFja3Nvbmxhd25jLmNvbYITbGFycmVhYW5k
b3J0ZWdhLmNvbYIPbGVnYWxsZWdhY3kuY29tghlsb2NhbHdlYmRlc2lnbmNvbXBh
bnkuY29tggttYnRpdGxlLmNvbYISbm9ydGhwb3J0dGl0bGUuY29tghRwYXJhZGlz
ZXRpdGxlaW5jLmNvbYIWcGFyYWRpc2V0aXRsZXN0YXVnLmNvbYIUcGFyYW1vdW50
dGl0bGVubS5jb22CEHBhcnRuZXJ0aXRsZS5jb22CEHByZWNpc2V0aXRsZS5jb22C
DHJ0cnRpdGxlLmNvbYIadGl0bGVwcmVtaXVtY2FsY3VsYXRvci5jb22CC3RpdGxl
c2YuY29tghF0cnVlbGluZXRpdGxlLmNvbYISdHN0aXRsZWZsb3JpZGEuY29tghF2
YWxvcmFic3RyYWN0LmNvbYIUdmFsb3J0aXRsZWFnZW5jeS5jb22CEndpbHNvbmhh
bWlsdG9uLmNvbYITd3d3LmFuc3dlcnRpdGxlLmNvbYIVd3d3LmFya3RpdGxldGV4
YXMuY29tghF3d3cuYmVzc2VubGF3LmNvbYIbd3d3LmJvdHRvbWxpbmVkYXNoYm9h
cmQuY29tghp3d3cuY2xlYXJ0aXRsZXNlcnZpY2VzLmNvbYIXd3d3LmNsb3Nld2l0
aGxlZ2FjeS5jb22CGHd3dy5lbXBpcmV0aXRsZWlkYWhvLmNvbYIWd3d3LmV4cHJl
c3N0aXRsZWNzLmNvbYIXd3d3LmZsYWdnY3JlZWt0aXRsZS5jb22CFXd3dy5mbGFn
c2hpcHRpdGxlLmNvbYITd3d3LmZvdGlsYXdmaXJtLmNvbYIZd3d3LmdvbGRlbmFi
c3RyYWN0LmFnZW5jeYIUd3d3LmdyYWNlY2h1bmxhdy5jb22CGXd3dy5ncmVlbmFj
cmVhYnN0cmFjdC5jb22CGXd3dy5oYXl3YXJkdGl0bGVncm91cC5jb22CHXd3dy5o
ZWFydGxhbmR0aXRsZWNvbXBhbnkuY29tghR3d3cuamFja3Nvbmxhd25jLmNvbYIX
d3d3LmxhcnJlYWFuZG9ydGVnYS5jb22CE3d3dy5sZWdhbGxlZ2FjeS5jb22CHXd3
dy5sb2NhbHdlYmRlc2lnbmNvbXBhbnkuY29tgg93d3cubWJ0aXRsZS5jb22CFnd3
dy5ub3J0aHBvcnR0aXRsZS5jb22CGHd3dy5wYXJhZGlzZXRpdGxlaW5jLmNvbYIa
d3d3LnBhcmFkaXNldGl0bGVzdGF1Zy5jb22CGHd3dy5wYXJhbW91bnR0aXRsZW5t
LmNvbYIUd3d3LnBhcnRuZXJ0aXRsZS5jb22CFHd3dy5wcmVjaXNldGl0bGUuY29t
gh53d3cudGl0bGVwcmVtaXVtY2FsY3VsYXRvci5jb22CD3d3dy50aXRsZXNmLmNv
bYIVd3d3LnRydWVsaW5ldGl0bGUuY29tghZ3d3cudHN0aXRsZWZsb3JpZGEuY29t
ghV3d3cudmFsb3JhYnN0cmFjdC5jb22CGHd3dy52YWxvcnRpdGxlYWdlbmN5LmNv
bYIWd3d3LndpbHNvbmhhbWlsdG9uLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCC
AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq
68G/KIXs+GRuAAABj09x4Z8AAAQDAEcwRQIgbvGdPCJ/FUCzHArCSI4lvO+gm+Oj
qU8xCtvLL8J5RAMCIQDxqbBqfMO6R+KHKrJgKq/L2xG/xPvaWDNU4t0CUpktuAB2
ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTKAAABj09x4hUAAAQDAEcw
RQIhAMw8AiN+bxO+bjZnOEaxCDkFeeamIhPoL0VTnnqDd+81AiAOdBSnqMzWA9C0
eLvYqNN9Vm9BllJw/HwFE0JiVzAMWjANBgkqhkiG9w0BAQsFAAOCAQEAnyokbCQc
YQyVxbg89bT1VGhD9MVvnVN5cRaKA+oH79+dODG4v3/WmrPgPHGw1BvI4vH5v05d
v+AkC88jVQ/7koaGY+1RJHu0WOMI3W/a1evN6DMd5jt3FZ5p38RNf/h09DNqBUJ9
oHNIkkStydgiYUCc7g9tt0qrdPVeRmUUP5Vo689V5NdMBHK5uYbBjPUpGDTK/3o1
gz7GKyloF7MqIlPclWxLKn+C6LTvUXogvVWuMekYvXBA4J2RHwKFtWEOnsCSegmJ
T84bmQsUwHrS4RYBUih8tk4v270T++xPotW0fgn9R6MNszw03ECc87AkdXXvnwpw
YOFCVfn2fuBp2w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U2TLNyeeP3UluDPdlzs
eXQUkoYhP0HOOGd1B9osbEVTvw4HhXy5DCzGsyrmVHVPYXMv1LsEgAOHdzKayKSA
oI+ht3XTA/fzkk7Z2r70HH8IQuSs0Grz31eGlMqtpwbbeSIWzc3SBfQyo/oIgb0z
cK3ht1K40cfCMk9Oo0WoDT96u2ZzAV/u+CdDP7VYmDo3LkdQWghvdqeup6DUJf91
lZvflD3M/bx/TZgv1gSkouCnJaPYKCWnz6lh+zyvWVv7+W2oIiPNbeCQFTvDQ3XQ
PK7kUYHJyoe/8IxgPTIs59Jc5Ga45WIq9VGoQLuNJ//fA40jbq1+ufZ17ag1GjBY
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406604999210831283008033139360074382591287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 18:46:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 18:46:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bessenlaw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26422059348448482899640621629583483625105199319822631518200033520429850469589959765382920384771584786054068984474930721693648193155100583602443966835346749245327713318082839319407860989254897780304758807115342042707143084152827176131250919636668897640939512928772326356152873708415739268202803554536428426920696801152556795123957922591268564865211200111285069873005470606623076422845187750872183419311461688151722420274090866905076851101565511147516273744358766062717920144078510185823817454077330349403343545709554465021872775209277283076451687372527921656040726234839515198590152544373929247580391299121213021902853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dce613f5be5dfa01cd5ced2121ee9f042e557505
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1544 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answertitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arktitletexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bessenlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bottomlinedashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleartitleservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closewithlegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empiretitleidaho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresstitlecs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaggcreektitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flagshiptitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotilawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenabstract.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gracechunlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacreabstract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haywardtitlegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartlandtitlecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksonlawnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larreaandortega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legallegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localwebdesigncompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbtitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northporttitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradisetitleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradisetitlestaug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramounttitlenm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnertitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisetitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtrtitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlepremiumcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlesf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truelinetitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstitleflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valorabstract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valortitleagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilsonhamilton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.answertitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arktitletexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bessenlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bottomlinedashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleartitleservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.closewithlegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.empiretitleidaho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expresstitlecs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flaggcreektitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flagshiptitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fotilawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenabstract.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gracechunlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenacreabstract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haywardtitlegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartlandtitlecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksonlawnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.larreaandortega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legallegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localwebdesigncompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbtitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northporttitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paradisetitleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paradisetitlestaug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramounttitlenm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partnertitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.precisetitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.titlepremiumcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.titlesf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truelinetitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tstitleflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valorabstract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valortitleagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilsonhamilton.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f4f71e19f000004030047304502206ef19d3c227f1540b31c0ac2488e25bcefa09be3a3a94f310adbcb2fc2794403022100f1a9b06a7cc3ba47e2872ab2602aafcbdb11bfc4fbda583354e2dd0252992db80076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f4f71e2150000040300473045022100cc3c02237e6f13be6e36673846b108390579e6a62213e82f45539e7a8377ef3502200e7414a7a8ccd603d0b478bbd8a8d37d566f41965270fc7c0513426257300c5a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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