*.amindfulnesslifecenter.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:94:66:de:76:4b:fa:27:1c:98:b9:b6:05:2a:9e:c1:e3:96 was issued on by Let's Encrypt.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.amindfulnesslifecenter.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:94:66:de:76:4b:fa:27:1c:98:b9:b6:05:2a:9e:c1:e3:96
Serial Number (int): 398947670376156399284917547091953788773270
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d3:12:14:d4:31:f7:22:95:a5:ae:d3:1c:31:e4:5a:b0:6c:da:b3:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:2a:0b:93:bb:3b:fb:ae:a4:ff:f5:45:6d:bf:74:f7:60:38:f3:ac
Fingerprint (sha256): 78:a2:59:96:09:a6:1f:26:59:79:0f:3c:df:55:60:ee:51:7c:35:03:5a:ad:50:c8:75:1f:60:a8:51:65:4c:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.amindfulnesslifecenter.com

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.amindfulnesslifecenter.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amindfulnesslifecenter.com
*.aquarius-charter.com
*.arlingtonmtw.com
*.blackknollstudio.com
*.callensessentials.com
*.craftandlegend.com
*.flyingbirdbotanicals.com
*.joyinsurance.com
*.kariestrin.com
*.kurzrealestate.com
*.kyliessweetshop.com
*.lemontuesdayshoppe.com
*.meta-universe.org
*.pamdeca.com
*.periscopegroup.com
*.perla-luna.com
*.petworthnews.org
*.presidentialseasideduathlon.com
*.ramseyphotos.com
*.reclaimedinteriorsboise.com
*.scryrecordings.com
*.shopavocado.com
*.thecrackerking.com
*.thefriendshipprojectbook.com
*.thejoyfulforager.com
*.zdtservices.com
amindfulnesslifecenter.com
aquarius-charter.com
arlingtonmtw.com
blackknollstudio.com
callensessentials.com
craftandlegend.com
flyingbirdbotanicals.com
joyinsurance.com
kariestrin.com
kurzrealestate.com
kyliessweetshop.com
lemontuesdayshoppe.com
meta-universe.org
pamdeca.com
periscopegroup.com
perla-luna.com
petworthnews.org
presidentialseasideduathlon.com
ramseyphotos.com
reclaimedinteriorsboise.com
scryrecordings.com
shopavocado.com
thecrackerking.com
thefriendshipprojectbook.com
thejoyfulforager.com
zdtservices.com

Other certificates including the domain name amindfulnesslifecenter.com

(limited to 100 certificates)
*.ayenako.org
*.ashcreekph.com
*.npcomp.com
*.sleepinggc.com
*.oaklandgrown.org
scoutchamps.com
*.escapewithdollycas.com
*.proseal.us
*.southernlights.biz
*.eddieross.com
xzz.world
*.awstartt.com
*.amindfulnesslifecenter.com
*.awstartt.com
*.krackerpi.com
*.theroyalesf.com
*.ggashi.org
*.southernlights.biz

Certificate

The complete raw certificate details for *.amindfulnesslifecenter.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ2jCCCMKgAwIBAgISBJRm3nZL+iccmLm2BSqeweOWMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTMwODM0NDJaFw0x
OTA5MTEwODM0NDJaMCcxJTAjBgNVBAMMHCouYW1pbmRmdWxuZXNzbGlmZWNlbnRl
ci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsI33QTWZe3LT0
3+QuU9VqJRc/E5gGkMh/WDu9pG7w5YcdL2myIeyVwvUgfcroGSx13IhF2QUaAeE6
lXPtDYrfpknTxE0AcOEHUSB8QTehyu0RSxDK88vD0jcwGcVa22jpsqAP7VWlLPbL
zDzlxHtqN7aEGaAHNgi5xDGhGocVIY5KAftS/V5avUsgMdTdVngAE2oiTlp7+nYx
fdUTQ9smeWYatka30/hW5m5Maxz0LvKiZT/eA7nbxzs1z2A96DTk+qJtvW7IBzIi
JxvfQWuuIqta0qaqgwy19F/GAqZzQB/tMA43xkZrKc1TwCvv0EB8RKi5W1tO6DJ0
n0gBhps3AgMBAAGjggbbMIIG1zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNMSFNQx
9yKVpa7THDHkWrBs2rNqMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wggSNBgNVHREEggSEMIIEgIIcKi5hbWluZGZ1bG5l
c3NsaWZlY2VudGVyLmNvbYIWKi5hcXVhcml1cy1jaGFydGVyLmNvbYISKi5hcmxp
bmd0b25tdHcuY29tghYqLmJsYWNra25vbGxzdHVkaW8uY29tghcqLmNhbGxlbnNl
c3NlbnRpYWxzLmNvbYIUKi5jcmFmdGFuZGxlZ2VuZC5jb22CGiouZmx5aW5nYmly
ZGJvdGFuaWNhbHMuY29tghIqLmpveWluc3VyYW5jZS5jb22CECoua2FyaWVzdHJp
bi5jb22CFCoua3VyenJlYWxlc3RhdGUuY29tghUqLmt5bGllc3N3ZWV0c2hvcC5j
b22CGCoubGVtb250dWVzZGF5c2hvcHBlLmNvbYITKi5tZXRhLXVuaXZlcnNlLm9y
Z4INKi5wYW1kZWNhLmNvbYIUKi5wZXJpc2NvcGVncm91cC5jb22CECoucGVybGEt
bHVuYS5jb22CEioucGV0d29ydGhuZXdzLm9yZ4IhKi5wcmVzaWRlbnRpYWxzZWFz
aWRlZHVhdGhsb24uY29tghIqLnJhbXNleXBob3Rvcy5jb22CHSoucmVjbGFpbWVk
aW50ZXJpb3JzYm9pc2UuY29tghQqLnNjcnlyZWNvcmRpbmdzLmNvbYIRKi5zaG9w
YXZvY2Fkby5jb22CFCoudGhlY3JhY2tlcmtpbmcuY29tgh4qLnRoZWZyaWVuZHNo
aXBwcm9qZWN0Ym9vay5jb22CFioudGhlam95ZnVsZm9yYWdlci5jb22CESouemR0
c2VydmljZXMuY29tghphbWluZGZ1bG5lc3NsaWZlY2VudGVyLmNvbYIUYXF1YXJp
dXMtY2hhcnRlci5jb22CEGFybGluZ3Rvbm10dy5jb22CFGJsYWNra25vbGxzdHVk
aW8uY29tghVjYWxsZW5zZXNzZW50aWFscy5jb22CEmNyYWZ0YW5kbGVnZW5kLmNv
bYIYZmx5aW5nYmlyZGJvdGFuaWNhbHMuY29tghBqb3lpbnN1cmFuY2UuY29tgg5r
YXJpZXN0cmluLmNvbYISa3VyenJlYWxlc3RhdGUuY29tghNreWxpZXNzd2VldHNo
b3AuY29tghZsZW1vbnR1ZXNkYXlzaG9wcGUuY29tghFtZXRhLXVuaXZlcnNlLm9y
Z4ILcGFtZGVjYS5jb22CEnBlcmlzY29wZWdyb3VwLmNvbYIOcGVybGEtbHVuYS5j
b22CEHBldHdvcnRobmV3cy5vcmeCH3ByZXNpZGVudGlhbHNlYXNpZGVkdWF0aGxv
bi5jb22CEHJhbXNleXBob3Rvcy5jb22CG3JlY2xhaW1lZGludGVyaW9yc2JvaXNl
LmNvbYISc2NyeXJlY29yZGluZ3MuY29tgg9zaG9wYXZvY2Fkby5jb22CEnRoZWNy
YWNrZXJraW5nLmNvbYIcdGhlZnJpZW5kc2hpcHByb2plY3Rib29rLmNvbYIUdGhl
am95ZnVsZm9yYWdlci5jb22CD3pkdHNlcnZpY2VzLmNvbTBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AOJpS64m
6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABa1Awe0sAAAQDAEgwRgIhAPUJ
nZH6jmqXxxwbcu7okRbnDTGw9zhI2809Od4WYbFiAiEA9IfXeEovoSYRpziBdcNG
ofnHNl14hQbhe56SKG1DhgYAdwBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdo
VEvYjQAAAWtQMHsZAAAEAwBIMEYCIQCclZEcGopXkkUTX2vMHla1SaPGYSJ9FhHj
QOWG1a3cDwIhANLyYH52z1Y6Y+Eq1Rf+nIPiJ25gaRFiBNRQwC1qXH8RMA0GCSqG
SIb3DQEBCwUAA4IBAQBfFaCnZFqhAnGxTE9d///1iagUGHPhIC+ckqhR4ISsEG09
uGgP5LZ41pQEgLI197sp8eAs4Jr6yJkyvCbUWemUH3YzUvD956RWZ5+sshmpTlKp
J7Cbm0ynGvu8YuLPrXokwuw7nFci52VTErr1xfJ0A++wG70MJTFOh6L5r/6TeLXr
Y5Wq+BnMKdz0XmJwK67rnTj8VSL+NwgTBhkihuM6oeteZ2zEFHwEtWVMz6pnhjkE
Ix0Xs2At75TSyTY+aE856xV/JP1lJI5d7LHeCy0Tsnwk7LwMaGfXePNDhy5Oe4GG
TmSOKqM/vxVuM3e/K35+60YClYg6Ojd23Uv1Dw4n
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCN90E1mXty09N/kLlPV
aiUXPxOYBpDIf1g7vaRu8OWHHS9psiHslcL1IH3K6BksddyIRdkFGgHhOpVz7Q2K
36ZJ08RNAHDhB1EgfEE3ocrtEUsQyvPLw9I3MBnFWtto6bKgD+1VpSz2y8w85cR7
aje2hBmgBzYIucQxoRqHFSGOSgH7Uv1eWr1LIDHU3VZ4ABNqIk5ae/p2MX3VE0Pb
JnlmGrZGt9P4VuZuTGsc9C7yomU/3gO528c7Nc9gPeg05Pqibb1uyAcyIicb30Fr
riKrWtKmqoMMtfRfxgKmc0Af7TAON8ZGaynNU8Ar79BAfESouVtbTugydJ9IAYab
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398947670376156399284917547091953788773270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 08:34:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 08:34:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.amindfulnesslifecenter.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21730489945225475147237775676369299776568159368139663381186447957947648001387043440994505622689379476781034145605174562412671258366001149654594648577663952920069494163582440725994536306413419343503358462467076842219814996174206571137409493387190466553258483727781663268480481690473802662122380057311135815954365569741876446387754820237591159602718713336865537533050194019554275099288642918480994886653857211258484345190307797220165154041637338034546721922889734745674574679110460776321320411850755404840620979348477137068669796049262830980304186507272568974533918345682992527001762287446993799557049102688908579609399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:19|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amindfulnesslifecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquarius-charter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arlingtonmtw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackknollstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.callensessentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craftandlegend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyingbirdbotanicals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joyinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kariestrin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurzrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kyliessweetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemontuesdayshoppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meta-universe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pamdeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.periscopegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perla-luna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petworthnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.presidentialseasideduathlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ramseyphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reclaimedinteriorsboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scryrecordings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopavocado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecrackerking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefriendshipprojectbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thejoyfulforager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zdtservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amindfulnesslifecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquarius-charter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arlingtonmtw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackknollstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callensessentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftandlegend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingbirdbotanicals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joyinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kariestrin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurzrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyliessweetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemontuesdayshoppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meta-universe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamdeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'periscopegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perla-luna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petworthnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presidentialseasideduathlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramseyphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reclaimedinteriorsboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scryrecordings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopavocado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecrackerking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefriendshipprojectbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thejoyfulforager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdtservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b50307b4b0000040300483046022100f5099d91fa8e6a97c71c1b72eee89116e70d31b0f73848dbcd3d39de1661b162022100f487d7784a2fa12611a7388175c346a1f9c7365d788506e17b9e92286d43860600770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b50307b1900000403004830460221009c95911c1a8a579245135f6bcc1e56b549a3c661227d1611e340e586d5addc0f022100d2f2607e76cf563a63e12ad517fe9c83e2276e6069116204d450c02d6a5c7f11
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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