www.nffco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:1b:20:d8:ad:c4:db:97:56:2f:41:b1:ba:ca:f0:06:82 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nffco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:1b:20:d8:ad:c4:db:97:56:2f:41:b1:ba:ca:f0:06:82
Serial Number (int): 307991601767602846312481720807673578915458
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ba:e7:d9:4a:ad:46:ec:a1:19:a7:27:44:6a:a4:f2:46:c0:de:36:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:a7:6d:3c:5c:fc:21:e4:9f:f5:aa:d2:6f:17:0c:db:e8:ac:7f:98
Fingerprint (sha256): 7a:59:5e:9d:f8:eb:f7:7d:4e:d7:a1:03:da:5c:93:ac:4f:a0:35:7f:28:34:f2:0c:70:15:7d:e3:16:10:c5:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nffco.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nffco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aegisfinancialgroup.com
albuquerqueprp.com
beark.com
biosolidi.com
boulevardrto.com
cafegrotto.com
calilivecasino.com
canadianastrophoto.com
customrooftarp.com
egwco.com
expressstream.com
familienmagazin.com
festeprivate.com
fmuco.com
gearer.com
grow-pro.com
hotelkn.com
hoteloq.com
kzee.com
lacecardigan.com
magnesiumglycinate.com
modernlifeiswar.com
neocup.com
nffco.com
nightship.com
oikco.com
pinehub.com
pnoco.com
polystamp.com
polytraining.com
printamansion.com
prosaeverso.com
qualtravel.com
scriptinstaller.com
servizisiderurgici.com
smashask.com
stampantiaghi.com
supercargar.com
suprapro.com
surfacewaterdepletion.com
sushi-bar.com
swisscooking.com
thebigswitch.com
wgtco.com
winecellarcooler.com
wisconsinprp.com
wisconsinstemcell.org
wmmco.com
www.aegisfinancialgroup.com
www.albuquerqueprp.com
www.beark.com
www.biosolidi.com
www.boulevardrto.com
www.cafegrotto.com
www.calilivecasino.com
www.canadianastrophoto.com
www.customrooftarp.com
www.egwco.com
www.expressstream.com
www.familienmagazin.com
www.festeprivate.com
www.fmuco.com
www.gearer.com
www.grow-pro.com
www.hotelkn.com
www.hoteloq.com
www.kzee.com
www.lacecardigan.com
www.magnesiumglycinate.com
www.modernlifeiswar.com
www.neocup.com
www.nffco.com
www.nightship.com
www.oikco.com
www.pinehub.com
www.pnoco.com
www.polystamp.com
www.polytraining.com
www.printamansion.com
www.prosaeverso.com
www.qualtravel.com
www.scriptinstaller.com
www.servizisiderurgici.com
www.smashask.com
www.stampantiaghi.com
www.supercargar.com
www.suprapro.com
www.surfacewaterdepletion.com
www.sushi-bar.com
www.swisscooking.com
www.thebigswitch.com
www.wgtco.com
www.winecellarcooler.com
www.wisconsinprp.com
www.wisconsinstemcell.org
www.wmmco.com
www.yourhiredgun.com
www.zurrar.com
yourhiredgun.com
zurrar.com

Other certificates including the domain name nffco.com

(limited to 100 certificates)
www.nffco.com
realstorm.com
nffco.com
glassdyne.com
www.nffco.com
sessaaurunca.org
poisonivysurvivalguide.com
www.vffco.com
infoseclabs.org
www.nffco.com
www.cureadebt.com
nffco.com
nffco.com
www.nffco.com
www.freespinosaurus.com
www.ylnco.com
nffco.com

Certificate

The complete raw certificate details for www.nffco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8e0EQkqMFvsZ5TskmjIn
EtCyV28dMUvfuJXiOwa1gXK1Dsn3x9lCcotN5Y58wWpH49FZTgIYg/blMOafrFkt
RUGtwZkG5tdFoUtcsgI8kANKF+C2+OBwzernwAmJ8VjDryufjcfPrLeLICa5qlF5
KmA2TWdBaY/1fNKROcYeSTZrjHjNG3iBWst5I/FPh2Bi4crTG6jftHD3YY3pbzl1
jnAwzQSHP9LpMlYBm3l+p3yn47yJiH60qx8Qakg6nsCrF7LVcAWUyjt9USmYo4fR
6hpP4+nRLKPoUGKbB4PBP16c0IwXDN+Y/6OabKBWfb8m2H3mpUbY91CbCA+cr5D9
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307991601767602846312481720807673578915458
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 16:51:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 16:51:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nffco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30540308756364953609897671523424002066195607557075129923294921077602707090192477638560623697070761060680853346136297429355521209809268102423859114051228914379063009757501619687402432627187400216798332659282216510303216823941610499352615722169080821574249887980883171428495245822830083529942727926320584622409145335609991975131221795211227941925135933109348867048152349390544543761860172368879600854223303847312415502440954038531750124115218924806192899833908004158913401063050251400042260396168226578294711042671365174165097993456197205654733607844858977813403971700733798453882493922196939729303199544892122599587221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bae7d94aad46eca119a727446aa4f246c0de3652
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1872 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegisfinancialgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albuquerqueprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biosolidi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boulevardrto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafegrotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calilivecasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadianastrophoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customrooftarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familienmagazin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'festeprivate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gearer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grow-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelkn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteloq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kzee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacecardigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnesiumglycinate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernlifeiswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neocup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nffco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oikco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polystamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printamansion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prosaeverso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualtravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scriptinstaller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servizisiderurgici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smashask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stampantiaghi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercargar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suprapro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfacewaterdepletion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushi-bar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisscooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebigswitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wgtco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winecellarcooler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisconsinprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisconsinstemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmmco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegisfinancialgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albuquerqueprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biosolidi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boulevardrto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafegrotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calilivecasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadianastrophoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customrooftarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expressstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.familienmagazin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.festeprivate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gearer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grow-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelkn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoteloq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kzee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacecardigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnesiumglycinate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.modernlifeiswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neocup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nffco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nightship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oikco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pnoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polystamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printamansion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prosaeverso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualtravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scriptinstaller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servizisiderurgici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smashask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stampantiaghi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supercargar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suprapro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfacewaterdepletion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sushi-bar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swisscooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebigswitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wgtco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winecellarcooler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wisconsinprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wisconsinstemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmmco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourhiredgun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zurrar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourhiredgun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurrar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bb3d06b3d0000040300473045022100a80ad6624b6c2d44aa34724abf5fff9ebadc7a6c6c4072bad5722ae6db2ce77202206c2a63ef319f19bc9c786fdee427593e4e657d1c7083c05e95cfd09d04949cb6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bb3d06b5a00000403004730450220089e0a92ab7879b215b27c77f6e8fc1415ed6375f5ac9f117c013de704ae00be022100dff821dab41230217f3f7f6e8c8335311ce49dc01a5c0a20ad9591d64c7f9689
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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