apostrophe.goprimer.com

Issued by R3

About this certificate

This digital certificate with serial number 04:72:31:b8:53:b8:ea:36:bb:53:f5:8a:ad:56:d9:b5:20:75 was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apostrophe.goprimer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:72:31:b8:53:b8:ea:36:bb:53:f5:8a:ad:56:d9:b5:20:75
Serial Number (int): 387307422808533867372013281854937671999605
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:cb:fb:4c:25:62:bc:ef:0a:11:94:28:d3:5e:38:24:4f:29:b2:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:5b:85:b0:07:18:f1:0f:56:2b:64:1f:69:86:b1:64:fe:2d:bf:5a
Fingerprint (sha256): 7c:52:d0:72:b0:a7:9c:80:27:e4:77:88:b8:f2:8f:99:e6:8f:92:62:be:e0:a6:56:ed:96:51:52:85:a2:3e:fe

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apostrophe.goprimer.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apostrophe.goprimer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apostrophe.goprimer.com
atolla.goprimer.com
billcom.goprimer.com
buy.letsbld.com
cameo.goprimer.com
cuemath.goprimer.com
curalife.goprimer.com
cushion.goprimer.com
cutbackcoach.goprimer.com
dario.goprimer.com
diversyfund.goprimer.com
evernow.goprimer.com
evernow2.goprimer.com
explore.wineaccess.com
felixforyou.goprimer.com
fiton.goprimer.com
forhims.goprimer.com
gainful.goprimer.com
get.fitonapp.com
get.forhims.com
get.metabolicrenewal.com
get.monarchmoney.com
get.montikids.com
get.noom.com
go.gainful.com
hawthorne.goprimer.com
invest.diversyfund.com
katkin.goprimer.com
ladder.goprimer.com
langehair.goprimer.com
lifeprofitness.goprimer.com
liveclass.cuemath.com
metabolicrenewal.goprimer.com
modernfertility.goprimer.com
monarchmoney.goprimer.com
montikids.goprimer.com
mysteryscience.goprimer.com
offer.mydario.com
otter.goprimer.com
peachystudio.goprimer.com
picsart.goprimer.com
prowritingaid.goprimer.com
radfordbeauty.goprimer.com
rb.victoriaradford.com
rocksbox.goprimer.com
sans.goprimer.com
savvy.goprimer.com
secure.goprimer.com
signup.bill.com
start.farmsteadapp.com
start.getsunday.com
subscribe.rocksbox.com
sunday.goprimer.com
thefeed.goprimer.com
therapynotebooks.goprimer.com
triplebyte.goprimer.com
trufora.goprimer.com
try-app.go.insure
try.apostrophe.com
try.atolla.co
try.breathesans.com
try.cameo.com
try.curalife.com
try.cushion.ai
try.cutbackcoach.com
try.evernow.co
try.evernow.com
try.felixforyou.ca
try.forhers.com
try.hawthorne.co
try.joinladder.com
try.katkin.club
try.langehair.com
try.lifeprofitness.com
try.madison-reed.com
try.modernfertility.com
try.mysteryscience.com
try.otter.ai
try.peachystudio.com
try.picsart.com
try.prowritingaid.com
try.savvy.insure
try.thefeed.com
try.therapynotebooks.com
try.triplebyte.com
try.trufora.com
try.upstep.com
try.wildfang.com
upstep.goprimer.com
wildfang.goprimer.com
wineaccess.goprimer.com

Other certificates including the domain name goprimer.com

(limited to 100 certificates)
apostrophe.goprimer.com
tls.automattic.com
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
getapp.in
getapp.in
5000772504.goprimer.co
allwellbeauty.goprimer.com
alphalion.goprimer.com
apostrophe.goprimer.com
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
alphalion.goprimer.com
allwellbeauty.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
aj1.goprimer.co
getapp.in
goprimer.com
buy.letsbld.com
apostrophe.goprimer.com
tls.automattic.com
getapp.in
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
agirlnamedotis.goprimer.com
aj1.goprimer.co
goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
alphalion.goprimer.com
alphalion.goprimer.com
buy.letsbld.com
tls.automattic.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
ios.goprimer.com
allwellbeauty.goprimer.com
*.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
help.goprimer.com
apostrophe.goprimer.com
apostrophe.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
agirlnamedotis.goprimer.com
getapp.in
getapp.in
ios.goprimer.com
android.goprimer.com
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
tls.automattic.com
allwellbeauty.goprimer.com
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
tls.automattic.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
allwellbeauty.goprimer.com
alphalion.goprimer.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
aj.goprimer.co
getapp.in
apostrophe.goprimer.com
alphalion.goprimer.com
getapp.in
apostrophe.goprimer.com
help.goprimer.com
5000772504.goprimer.co
alphalion.goprimer.com
tls.automattic.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in

Certificate

The complete raw certificate details for apostrophe.goprimer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnppdATT+Zox2drvxK2QV
SNizg87ZCnl5s/W1V3wvlbCna1xo8ICiroQ1ryvpdIs4xKXIX1Vp3/5vO6tf9X9U
wRLPPfA7cX92XaQEl9WLzkOGJ9VyIDmO2ch9gzXzTTE2yp1i5F+MVNjTVzOUXh5U
3MDyrnMUG3s0vRkI53Ge0hf/1BsM2y1qtZoYblGfwruymU90sZkFKnbJiSWfwqDm
7uwmMWeLZJ1E7XvqmCG5XxyiVBa3RaCAjy0aCV/vCIu3SbP4fe0MAdV9qstM2uVD
rvOL9BlrfxMxqrz8QiGWZ3WJqMc4CvvlxwMwIIM/j76HmVAaFg1C+p3asd1MsAMX
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387307422808533867372013281854937671999605
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-08 14:09:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-06 14:09:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apostrophe.goprimer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20021771564711435247067723333838444968025919637976779891670022234326317482991517133789450914940122681689937861259609047664595602913925598467022154562609087337184758463662763048009074066827943837381244417415270676580651686762535136331199030675155730569957097193747981561975884428548431600902549706134097043332709169397644091676735186348846078290237517736747141351917811346007467148599212109980473100671790080298396817761890204787104011186850982329157510882420795863325809703699316211613044714124655488042075444087083248364468626652575165136607095370493878430520169880652155692421946352005639132837389308293014901430169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0cbfb4c2562bcef0a119428d35e38244f29b2e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1967 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apostrophe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atolla.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billcom.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.letsbld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameo.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuemath.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curalife.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cushion.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutbackcoach.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dario.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversyfund.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow2.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.wineaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felixforyou.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiton.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forhims.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainful.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.fitonapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.forhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.metabolicrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.monarchmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.montikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.noom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gainful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawthorne.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.diversyfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katkin.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladder.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langehair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeprofitness.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveclass.cuemath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolicrenewal.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernfertility.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monarchmoney.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montikids.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysteryscience.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offer.mydario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otter.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachystudio.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picsart.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prowritingaid.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radfordbeauty.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rb.victoriaradford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocksbox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sans.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savvy.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.bill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.farmsteadapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.getsunday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.rocksbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunday.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefeed.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapynotebooks.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triplebyte.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trufora.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try-app.go.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.apostrophe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.atolla.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.breathesans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cameo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.curalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cushion.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cutbackcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.felixforyou.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.forhers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.hawthorne.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.joinladder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.katkin.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.langehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.lifeprofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.madison-reed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.modernfertility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.mysteryscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.otter.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.peachystudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.prowritingaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.savvy.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.thefeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.therapynotebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.triplebyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.trufora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.upstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.wildfang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstep.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildfang.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineaccess.goprimer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017a86aae02d0000040300473045022042af8074da47ef4a628ae3cc28294dc657835df373d457f24e8196a8c2abf4ec022100ad043014b2ab2cfb06bb726df34b50a3caf71a0cde965b7b0c0cd7bdc6e797fe007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017a86aae0210000040300483046022100b54ae96731735b149e74ae0e0cb9fa48fe5ddf8ab3fd279e4997a5670a21dac5022100d0b8e96eaf0aea7e20c55556aa2682f8f658e2d39bdefea98213ef432d5a2dc1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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