www.aruim.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:64:f7:3e:a8:48:95:24:bd:04:81:3e:cc:a8:71:47:16:66 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.aruim.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:f7:3e:a8:48:95:24:bd:04:81:3e:cc:a8:71:47:16:66
Serial Number (int): 295693739137934088461040283901961185990246
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:b1:07:f1:40:2f:f7:b0:64:c8:8b:37:ca:0c:d5:e4:6e:82:59:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 41:39:ac:5a:aa:69:05:e6:c0:2f:da:84:aa:16:be:c9:55:b2:b5:f0
Fingerprint (sha256): 7c:8e:90:25:56:6b:56:d3:e8:62:2e:6b:6f:ac:42:5f:5c:4c:07:35:37:76:6c:6d:c3:56:f3:91:08:47:0d:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.aruim.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aruim.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

420cbdpro.com
7boerum.com
alpinetreeremoval.com
amaruca.com
andrewpacygacpa.com
aruim.com
atcoengineering.com
barkzero.com
bellepearl.com
boat-share.com
brincadeiras.com
cuatrocommas.com
dragcruises.com
freecooking.com
guiadeturistas.com
heavymic.com
housestoo.com
identifymyip.com
inattivi.com
intelloo.com
johnmichaelcannon.com
kereso.com
konci.com
koolvision.com
ledsignals.com
legalnightmare.com
literaryuniverse.org
littlerocksportsdoctor.com
moorheaddental.com
myenergytank.com
namorable.com
necklaceextender.com
nonreportable.com
padleap.com
philadelphiaregenerativemedicine.com
play24.uk
prepaidmetering.com
provencesoap.com
rioum.com
saturnphotos.com
sportsdoctorsnewyork.com
sportstherapyboston.com
thenycinjurylawyer.com
tightask.com
usakravmaga.com
v4ped.com
vpntunneling.com
wellswipe.com
wonderfulgin.com
www.420cbdpro.com
www.7boerum.com
www.alpinetreeremoval.com
www.amaruca.com
www.andrewpacygacpa.com
www.aruim.com
www.atcoengineering.com
www.barkzero.com
www.bellepearl.com
www.boat-share.com
www.brincadeiras.com
www.cuatrocommas.com
www.dragcruises.com
www.freecooking.com
www.guiadeturistas.com
www.heavymic.com
www.housestoo.com
www.identifymyip.com
www.inattivi.com
www.intelloo.com
www.johnmichaelcannon.com
www.kereso.com
www.konci.com
www.koolvision.com
www.ledsignals.com
www.legalnightmare.com
www.literaryuniverse.org
www.littlerocksportsdoctor.com
www.moorheaddental.com
www.myenergytank.com
www.namorable.com
www.necklaceextender.com
www.nonreportable.com
www.padleap.com
www.philadelphiaregenerativemedicine.com
www.play24.uk
www.prepaidmetering.com
www.provencesoap.com
www.rioum.com
www.saturnphotos.com
www.sportsdoctorsnewyork.com
www.sportstherapyboston.com
www.thenycinjurylawyer.com
www.tightask.com
www.usakravmaga.com
www.v4ped.com
www.vpntunneling.com
www.wellswipe.com
www.wonderfulgin.com
www.ypellc.com
ypellc.com

Other certificates including the domain name aruim.com

(limited to 100 certificates)
aruim.com
www.aruim.com
aruim.com
www.aruim.com
www.aruim.com
www.aruim.com
housestoo.com

Certificate

The complete raw certificate details for www.aruim.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rgfFVeImwsg5uIESHYn
w31zitK/Vp7hloMEBN7LdWayYD26g5WLzCuu7ABk36AUDnUNghxXoBMlcJsIlc0/
PejOXeLLOzs4uneBy1iNEPI0Hq0NkKNXsxHWzEp8cadw9su8KIqa1XljM5NNc7MS
kTWUsCBRi2j1cLqnXyaUaLllSaLT4K96P2jIoddRVwF4KtzURYoZkZmu5j/GDGZ2
qjaqm0KBUJmKjaZmaSrm3QiaqkYtRgMMDvPhurp3fXC+fRTqaz+nSaXQKAJ4s2iM
cvFEIbLwuwTroTo9G5BQxsIvwEM63PaYiIcs6tfvNDO+qg7gOQdYZ3tTa8/RLrq2
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295693739137934088461040283901961185990246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 15:26:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-20 15:26:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aruim.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27610744138433790525676188985534602338217708233103561778556294541467057386565472909665113506729549565764839357998705231977722342578370399928117914738306767611763678959257231949386559620077026379140632209329843979048012754110766227755517890131155377602761707930210038564801876122812317090553635939289831628852275101078484375043982948578048847095047639598352134170721409794611859836618575395861243164223886635211522186814699273672781458637894722823353277244929582898073600946916090830092927034765119827866140496194146579805891801859942865268426753024094698138788274309179042327585894010402581454851056078231897103840779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8b107f1402ff7b064c88b37ca0cd5e46e825950
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1964 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '420cbdpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7boerum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpinetreeremoval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amaruca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewpacygacpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aruim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atcoengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barkzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellepearl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boat-share.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brincadeiras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuatrocommas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragcruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freecooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guiadeturistas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heavymic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housestoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identifymyip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inattivi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelloo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnmichaelcannon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kereso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koolvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledsignals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalnightmare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literaryuniverse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlerocksportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moorheaddental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myenergytank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namorable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'necklaceextender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonreportable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'padleap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philadelphiaregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play24.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaidmetering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provencesoap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rioum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saturnphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsdoctorsnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportstherapyboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenycinjurylawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tightask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usakravmaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v4ped.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpntunneling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellswipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wonderfulgin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.420cbdpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.7boerum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpinetreeremoval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amaruca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewpacygacpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aruim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atcoengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barkzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellepearl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boat-share.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brincadeiras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuatrocommas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dragcruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freecooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guiadeturistas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heavymic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housestoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.identifymyip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inattivi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intelloo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnmichaelcannon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kereso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koolvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ledsignals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalnightmare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literaryuniverse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlerocksportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moorheaddental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myenergytank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.namorable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.necklaceextender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonreportable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.padleap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.philadelphiaregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.play24.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prepaidmetering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provencesoap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rioum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saturnphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsdoctorsnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportstherapyboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenycinjurylawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tightask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usakravmaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.v4ped.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpntunneling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellswipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wonderfulgin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ypellc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ypellc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fc8ed9c0d0000040300483046022100cc33fe002d79d66b8142d7362d999f6a66834881d7e640592ab99a0456dde163022100c5b8f8640cb8394bf0e8236d7f7205fc6ef63fd50431b68c6455fac7bb153f5c007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fc8ed9c1e0000040300473045022065e5b6ae965e0d33bfe8cba9b568b132292aac45b57609f8ea02c65903511121022100afc1fd53bd6c8fa2d63e0fafa55ffc87aa566dfceef171669e2117c4c7e9a734
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0013b5048f671f63d67d2fd21159c9e3a27033a143d46cfab39729942c6f72d7ff1c0e0608893d1b1c3e675678d60b1ab75ebf64f0af7fb90aaf56be616d2b3f28097c2b9e0202b31f188032a0a64b3d8115e08a508e4b0b7a0a03f18769eabaa925160cd6dd7b85aaf1993f620b0e3e6bbab979a24506bc7382f61e89e140802e70142078135ba42b4e0ab3f085f52bdb8320333723bf45a1617f35b8fb0aa144da49c40b68d309d367f1f279358cb38944881a3ad591e2066ab813cd75014c2e4aa35a35c52b00b0602331e413724025755ef6c8346202ba70b824ba9a48a1eabf91e22ac99f5ec530233b7308672e5b24760b3ca82cc92083159461a4c21cb1