www.benefitcheck.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:11:07:f8:19:68:20:a2:6b:c1:62:93:d8:27:49:4a:ad:0b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.benefitcheck.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:11:07:f8:19:68:20:a2:6b:c1:62:93:d8:27:49:4a:ad:0b
Serial Number (int): 354244536765598420381668019401496185187595
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0c:9b:66:12:36:49:d1:ae:b5:27:36:5b:cf:d1:93:95:1e:04:42:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:a0:9e:6e:68:f3:f4:9e:1a:36:02:8f:4c:11:f1:2e:09:df:91:52
Fingerprint (sha256): 74:8c:98:ef:52:0a:fd:e8:8c:cc:a8:4d:fe:a8:34:d9:10:45:00:a2:e3:fe:74:a1:94:d8:89:73:95:a4:2d:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.benefitcheck.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.benefitcheck.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dxtv.com
aicrypto.org
albuquerquestemcelltreatment.com
benefitcheck.com
bulkheadbrewingco.com
canyoujustnot.com
casinoincelemesi.com
certifiedlocal.org
cheap-trick.com
chicgeekpodcast.com
constructionelectrician.com
credittocoin.exchange
deonne.space
digitalcompute.com
everaide.com
facturar.mex.com
fxaber.com
gesalic.com
italiamobile.com
kelsy.space
kinky-boots.com
maconmacoff.com
maggy.org
manchesterstemcells.com
mozziekryptonite.com
naturalsleepsupplements.com
noteitright.com
oneeyedbunnies.com
paleoenthusiast.com
physicianhouston.com
planetusers.com
pray714.bible
protex-case.com
quickchex.com
realtysaskatchewan.com
rollercoasteraccident.com
sacramentostemcellcenters.com
savingmachine.com
sayables.com
showushow.com
slacklinegenius.com
ss9a.com
stemcellrhodeisland.com
sunnydaykeywest.com
telegnostic.com
terrex-case.com
tiphany.site
unisep.com
womenwarriors.org
www.3dxtv.com
www.aicrypto.org
www.albuquerquestemcelltreatment.com
www.benefitcheck.com
www.bulkheadbrewingco.com
www.canyoujustnot.com
www.casinoincelemesi.com
www.certifiedlocal.org
www.cheap-trick.com
www.chicgeekpodcast.com
www.constructionelectrician.com
www.credittocoin.exchange
www.deonne.space
www.digitalcompute.com
www.everaide.com
www.facturar.mex.com
www.fxaber.com
www.gesalic.com
www.italiamobile.com
www.kelsy.space
www.kinky-boots.com
www.maconmacoff.com
www.maggy.org
www.manchesterstemcells.com
www.mozziekryptonite.com
www.naturalsleepsupplements.com
www.noteitright.com
www.oneeyedbunnies.com
www.paleoenthusiast.com
www.physicianhouston.com
www.planetusers.com
www.pray714.bible
www.protex-case.com
www.quickchex.com
www.realtysaskatchewan.com
www.rollercoasteraccident.com
www.sacramentostemcellcenters.com
www.savingmachine.com
www.sayables.com
www.showushow.com
www.slacklinegenius.com
www.ss9a.com
www.stemcellrhodeisland.com
www.sunnydaykeywest.com
www.telegnostic.com
www.terrex-case.com
www.tiphany.site
www.unisep.com
www.womenwarriors.org
www.xn--jek.com
xn--jek.com

Other certificates including the domain name benefitcheck.com

(limited to 100 certificates)
zet6.com
manchesterstemcells.com
www.benefitcheck.com
hazukan.com
didproviders.com
baillargues.com
tomasik.com

Certificate

The complete raw certificate details for www.benefitcheck.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8/jgKPfdX4qnQjvS9lc
3kuLiwhZ+onls9a8BsOvxgj12F5wZ9AtsXPfegYvfo7N3jlp3pN0t9M+K9Dl5MsS
KvXDlxmlKFDVjNdTSmZUq7SM+vx6nyLj3etNx5hfOIBJXilVBLQ7xiVcRBFXOn8C
kppCqQB8cgQXy5RYuYFhkurNqx0L/5l60jS3MDRK6om7REFK7gUOQ0yMSuJW/vrJ
84JLxF0M5tQ/GBjJYga7oYf0ouBNpOinqnr40PaSA5TCUcN+hrDix6dnUS9BWmK4
x4NYRPWrjPUrzxu3+As5GNQLQJvGzn3fHBGqjVjocEXGtH/c/PBa6eKWL0IQXcq9
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354244536765598420381668019401496185187595
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 05:26:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-16 05:26:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.benefitcheck.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21689263878853010900340199749678779491606215291074686024401803554872707402338039612127332095696669886020164824939310888659468532167217109598406605667892063907810193062334551960799746723822378905018184035596047743103141082177787075115083441518439831682637398654662167096539592084065647961858986601587619427129006930915871582280123302579113083393239357377881649487169396173848417212116771618726515830993702506887679234112181454345707917579623296387992503146224337354806727773743257281105648438813271001560880031691759676960082662117618556271345801492058004982927315646343315448709192767256151567769193153286536648375589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c9b66123649d1aeb527365bcfd193951e04427a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2078 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dxtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aicrypto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albuquerquestemcelltreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulkheadbrewingco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canyoujustnot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinoincelemesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifiedlocal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheap-trick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicgeekpodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constructionelectrician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credittocoin.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deonne.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalcompute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everaide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facturar.mex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesalic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italiamobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelsy.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinky-boots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maconmacoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maggy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchesterstemcells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozziekryptonite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalsleepsupplements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noteitright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneeyedbunnies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paleoenthusiast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physicianhouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetusers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pray714.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protex-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickchex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtysaskatchewan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollercoasteraccident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacramentostemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savingmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sayables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showushow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slacklinegenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss9a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellrhodeisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnydaykeywest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telegnostic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrex-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiphany.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unisep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenwarriors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dxtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aicrypto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albuquerquestemcelltreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefitcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bulkheadbrewingco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canyoujustnot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinoincelemesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.certifiedlocal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheap-trick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicgeekpodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.constructionelectrician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.credittocoin.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deonne.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalcompute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everaide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facturar.mex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fxaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gesalic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italiamobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelsy.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinky-boots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maconmacoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maggy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manchesterstemcells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mozziekryptonite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalsleepsupplements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noteitright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneeyedbunnies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paleoenthusiast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.physicianhouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetusers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pray714.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protex-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quickchex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realtysaskatchewan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rollercoasteraccident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacramentostemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savingmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sayables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.showushow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slacklinegenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ss9a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellrhodeisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnydaykeywest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telegnostic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terrex-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiphany.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unisep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.womenwarriors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--jek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--jek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fb22e792f0000040300483046022100e14eef37cb955ec632c88cd400a6e198755e3ab62d501de7fec78405e18ee158022100fb9ba6900d174683d096c546e587d9af1a75dc38d194fb1dd8a7dd47a3956433007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fb22e79200000040300463044022052d169078e787498e673c5e2f92f5c0a3e0e4f3ab487560db2ab84a4fe078c17022008bf35d8674f7454c4b835f1b7c7dc341d886def5ff90bd644d34dad8c893cfa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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