*.yourgotoguy.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:15:c3:8a:24:b0:ea:e3:05:e7:db:28:0f:80:53:d6:0b:65 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.yourgotoguy.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:c3:8a:24:b0:ea:e3:05:e7:db:28:0f:80:53:d6:0b:65
Serial Number (int): 268742704240948580354350272978894600932197
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:12:14:d4:31:f7:22:95:a5:ae:d3:1c:31:e4:5a:b0:6c:da:b3:6a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 93:32:9c:87:30:be:cc:f7:7f:e2:9d:ec:bf:76:be:28:44:33:dc:96
Fingerprint (sha256): 72:de:05:c3:9a:cb:fa:64:31:67:c6:5e:87:5a:cd:5c:21:22:53:f2:ba:60:d5:e7:ae:1f:40:a9:0a:7f:bf:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.yourgotoguy.ca

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.yourgotoguy.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.arteople.com
*.atravelerslibrary.com
*.bakersinutah.com
*.bancorpwholesale.com
*.boero.net
*.boxedbydaydarmet.com
*.breakthroughwebsite.com
*.briandowney.com
*.capmedplus.com
*.chicheshomemadesweets.com
*.colortvset.com
*.comprotintaytoner.com
*.crawfordmorgan.com
*.crowsworldofanime.com
*.cryptoindex.guru
*.deltavee.net
*.eaglewestgroup.com
*.eglisededieu-larochelle.com
*.eglisededieu.org
*.evacdesign.com
*.eyegatedesign.com
*.freedomhomeofhope.com
*.freedomhomeofhope.org
*.jeffearls.com
*.life-cycle-pet-cremation.com
*.linktovisibility.com
*.martechconf.com
*.mavenmidwife.com
*.mavenmidwife.org
*.phaseiidesign.com
*.power-of-art.com
*.rainierfoothills.com
*.realitycheckers.com
*.realmissionary.com
*.spitfirelist.com
*.tahomablog.com
*.tarynonline.com
*.thegillzone.com
*.thunderriverenergyhealing.com
*.waldorfpressurewashing.com
*.waterlineusa.com
*.watogafoundation.org
*.widgetprint.com
*.yourgotoguy.ca
arteople.com
atravelerslibrary.com
bakersinutah.com
bancorpwholesale.com
boero.net
boxedbydaydarmet.com
breakthroughwebsite.com
briandowney.com
capmedplus.com
chicheshomemadesweets.com
colortvset.com
comprotintaytoner.com
crawfordmorgan.com
crowsworldofanime.com
cryptoindex.guru
deltavee.net
eaglewestgroup.com
eglisededieu-larochelle.com
eglisededieu.org
evacdesign.com
eyegatedesign.com
freedomhomeofhope.com
freedomhomeofhope.org
jeffearls.com
life-cycle-pet-cremation.com
linktovisibility.com
martechconf.com
mavenmidwife.com
mavenmidwife.org
phaseiidesign.com
power-of-art.com
rainierfoothills.com
realitycheckers.com
realmissionary.com
spitfirelist.com
tahomablog.com
tarynonline.com
thegillzone.com
thunderriverenergyhealing.com
waldorfpressurewashing.com
waterlineusa.com
watogafoundation.org
widgetprint.com
yourgotoguy.ca

Other certificates including the domain name yourgotoguy.ca

(limited to 100 certificates)
*.cbnsportsmedia.com
customers.tigertech.net
*.ovsoccercamp.com
*.4paincpc.com
*.4paincpc.com
*.ahorseandawizard.com
*.rediazauthor.com
*.jasonwelsch.com
*.phonebillcut.com
*.14bits.com
web12.tigertech.com
customers.tigertech.net
customers.tigertech.net
*.sexylosers.com
customers.tigertech.net
*.yourgotoguy.ca
*.phonebillcut.com
yourgotoguy.ca
yourgotoguy.ca
web12.tigertech.com
customers.tigertech.net
web12.tigertech.com
web12.tigertech.com
yourgotoguy.ca
customers.tigertech.net
customers.tigertech.net
*.catcnresearch.com
*.swordandlionpublishing.com
*.tilesmile.com
customers.tigertech.net
*.phonebillcut.com
*.14bits.com
*.4paincpc.com
*.rfwellnessfoundation.com
web12.tigertech.com
web12.tigertech.com
web12.tigertech.com
web12.tigertech.com
customers.tigertech.net
*.14bits.com
customers.tigertech.net
*.leadingmarks.com

Certificate

The complete raw certificate details for *.yourgotoguy.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCN90E1mXty09N/kLlPV
aiUXPxOYBpDIf1g7vaRu8OWHHS9psiHslcL1IH3K6BksddyIRdkFGgHhOpVz7Q2K
36ZJ08RNAHDhB1EgfEE3ocrtEUsQyvPLw9I3MBnFWtto6bKgD+1VpSz2y8w85cR7
aje2hBmgBzYIucQxoRqHFSGOSgH7Uv1eWr1LIDHU3VZ4ABNqIk5ae/p2MX3VE0Pb
JnlmGrZGt9P4VuZuTGsc9C7yomU/3gO528c7Nc9gPeg05Pqibb1uyAcyIicb30Fr
riKrWtKmqoMMtfRfxgKmc0Af7TAON8ZGaynNU8Ar79BAfESouVtbTugydJ9IAYab
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268742704240948580354350272978894600932197
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-09 09:26:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-09 09:26:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.yourgotoguy.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21730489945225475147237775676369299776568159368139663381186447957947648001387043440994505622689379476781034145605174562412671258366001149654594648577663952920069494163582440725994536306413419343503358462467076842219814996174206571137409493387190466553258483727781663268480481690473802662122380057311135815954365569741876446387754820237591159602718713336865537533050194019554275099288642918480994886653857211258484345190307797220165154041637338034546721922889734745674574679110460776321320411850755404840620979348477137068669796049262830980304186507272568974533918345682992527001762287446993799557049102688908579609399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:19|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arteople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atravelerslibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakersinutah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancorpwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boero.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boxedbydaydarmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.breakthroughwebsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briandowney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capmedplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicheshomemadesweets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colortvset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comprotintaytoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crawfordmorgan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crowsworldofanime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptoindex.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deltavee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eaglewestgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eglisededieu-larochelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eglisededieu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evacdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyegatedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedomhomeofhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedomhomeofhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeffearls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.life-cycle-pet-cremation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linktovisibility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martechconf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mavenmidwife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mavenmidwife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phaseiidesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.power-of-art.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rainierfoothills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realitycheckers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realmissionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spitfirelist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tahomablog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarynonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegillzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thunderriverenergyhealing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waldorfpressurewashing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterlineusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watogafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.widgetprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourgotoguy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arteople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atravelerslibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakersinutah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancorpwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boero.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxedbydaydarmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakthroughwebsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briandowney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capmedplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicheshomemadesweets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colortvset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comprotintaytoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawfordmorgan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowsworldofanime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptoindex.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltavee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglewestgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eglisededieu-larochelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eglisededieu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evacdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyegatedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomhomeofhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomhomeofhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffearls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-cycle-pet-cremation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linktovisibility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martechconf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavenmidwife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavenmidwife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phaseiidesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'power-of-art.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainierfoothills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realitycheckers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realmissionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spitfirelist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahomablog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarynonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegillzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thunderriverenergyhealing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waldorfpressurewashing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterlineusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watogafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgetprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourgotoguy.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001764709fae70000040300483046022100e4eb55607eda59501c3915d332c5c412c64d89b47ee4e59f9b0d84e30914867e022100c60c41e4c884f78362b64a4916d80d7dc4b6b77a99817e4ef8a628923505e3110077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001764709fc8f0000040300483046022100d4d95bfb40f52d7cc1e204d95a8fbf6a009513fc0cb3ebb400417b8dd0f0a0bd02210087a051864c83a12ba635241eaedd80c13f99b2593661dc3e731e9e825e172c0f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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