*.segra.com.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4f:60:0c:d6:32:8e:65:34:e2:ce:7a:17:0b:39:44:10:f7 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.segra.com.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4f:60:0c:d6:32:8e:65:34:e2:ce:7a:17:0b:39:44:10:f7
Serial Number (int): 375459123253393912071652499022213592387831
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:98:90:fb:89:85:81:44:ed:c9:d2:72:45:7c:f3:05:ea:9e:c3:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:67:02:c3:7b:8a:e0:d0:0e:08:63:d0:cc:09:22:6f:2d:29:d9:57
Fingerprint (sha256): 7d:fd:e2:0a:57:18:f2:ff:d6:74:0b:66:f4:2e:3c:9e:d7:24:d7:ea:4d:4b:8d:e5:f4:d3:5c:a9:20:aa:d3:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.segra.com.mx

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.segra.com.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5starfulfillment.com
*.antiqueparquet.com
*.bwajakarta.org
*.climateequityreference.org
*.cordtsco.com
*.deblaw.us
*.divetravel.us
*.freshman.app
*.ga-taxpro.com
*.gawain.industries
*.gobibmw.com
*.gobichevy.com
*.gobiford.com
*.gobigmc.com
*.gobijeep.com
*.gobiminicooper.com
*.gobinissan.com
*.gobiracks.com
*.gobitoyota.com
*.gobivolvo.com
*.goldenjackalpress.com
*.homeefficiencylendingprogram.com
*.homeviews.org
*.jadepayneaudio.com
*.jc-lights.com
*.jesus-rockers.co.uk
*.jesus-rocks.co.uk
*.marliescandesign.com
*.millstonekitchen.org
*.ounceessentials.com
*.pandgyachting.com
*.popcorntextureremoval.net
*.precisionconcretestructures.com
*.projectpave.org
*.protectyourchoice.org
*.pyramidpinesestates.com
*.responsiveinsuranceleads.com
*.ruairiobrien.com
*.segra.com.mx
*.sonomagroup.org
*.tapporosso.com
*.veteranstatebenefits.com
*.visibilidaddigital.com.mx
5starfulfillment.com
antiqueparquet.com
bwajakarta.org
climateequityreference.org
cordtsco.com
deblaw.us
divetravel.us
freshman.app
ga-taxpro.com
gawain.industries
gobibmw.com
gobichevy.com
gobiford.com
gobigmc.com
gobijeep.com
gobiminicooper.com
gobinissan.com
gobiracks.com
gobitoyota.com
gobivolvo.com
goldenjackalpress.com
homeefficiencylendingprogram.com
homeviews.org
jadepayneaudio.com
jc-lights.com
jesus-rockers.co.uk
jesus-rocks.co.uk
marliescandesign.com
millstonekitchen.org
ounceessentials.com
pandgyachting.com
popcorntextureremoval.net
precisionconcretestructures.com
projectpave.org
protectyourchoice.org
pyramidpinesestates.com
responsiveinsuranceleads.com
ruairiobrien.com
segra.com.mx
sonomagroup.org
tapporosso.com
veteranstatebenefits.com
visibilidaddigital.com.mx

Other certificates including the domain name segra.com.mx

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.segra.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVCbMg44XXDZBbjYs43l
ZOc2i8k6RXZxtd9NBUURVWwvEVkOm6rCVVW5VP3LYZ1VRuSgKLn7+ihGlRG3oUGI
e57oASbOnXSVchkQHuDyskuAelVgMDe1BeBXa7CWPkfockglyIk1mAq5uj4CEV82
XqNLJ5H25M2nJAMlmnSLsRWP4exaaTCsMnx15XXJyFe1EXids5a/3AXJB574MeXc
effFh0hB2LYhJKoNskORVqhyguDdHWHDDj/jONi6zJ6EkkHUS/8LOzsbCh9GtEu+
voIOO2pvQ3AdssqqHpBNCYqWL+bNY++e+2ywzW0bHby3dKfz3D+/+DhBcModDk+o
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375459123253393912071652499022213592387831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 07:35:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 07:35:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.segra.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23898788053292798754256238358322725908472676863497141772531178051273468515256074757777413002785122028606792513688837370473450877156306577536917910441231456751513090585598705941342062466130801558155785241369603993388066416137599080198882047600520307408821496874076952355792489015258910329631767444441669889471999535148250813621784619068106488269517774770708888630235821423807330306502653535677644409816496175133926517669145651762798837005608000300881689155049496198595678543145774442883377445168467991986621230818807766231217930948372288633482736748974365373892739340944261628273273651776933430469262756849451428456609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e29890fb89858144edc9d272457cf305ea9ec3b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1748 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5starfulfillment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antiqueparquet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bwajakarta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.climateequityreference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cordtsco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deblaw.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divetravel.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshman.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ga-taxpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gawain.industries'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobibmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobichevy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobiford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobigmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobijeep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobiminicooper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobinissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobiracks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobitoyota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobivolvo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldenjackalpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeefficiencylendingprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeviews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jadepayneaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jc-lights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jesus-rockers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jesus-rocks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marliescandesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millstonekitchen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ounceessentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pandgyachting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popcorntextureremoval.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precisionconcretestructures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectpave.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protectyourchoice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pyramidpinesestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.responsiveinsuranceleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruairiobrien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segra.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonomagroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapporosso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veteranstatebenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visibilidaddigital.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5starfulfillment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiqueparquet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwajakarta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climateequityreference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cordtsco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deblaw.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divetravel.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshman.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ga-taxpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gawain.industries'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobibmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobichevy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobiford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobigmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobijeep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobiminicooper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobinissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobiracks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobitoyota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobivolvo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenjackalpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeefficiencylendingprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeviews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jadepayneaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jc-lights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesus-rockers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesus-rocks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marliescandesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millstonekitchen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ounceessentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandgyachting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popcorntextureremoval.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisionconcretestructures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectpave.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectyourchoice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyramidpinesestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'responsiveinsuranceleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruairiobrien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segra.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonomagroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapporosso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veteranstatebenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visibilidaddigital.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b7406dda5000004030046304402204fde60de621be5852b58009a40b7f9fa20ec74f1fce125824cf1da7f247d61280220395b037a1fb2d6591b7268190f3515f5a43f472966ac495b3619ba2ae6f87d9f00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b7406dd8d0000040300483046022100e6ab1ea581205ab60a8c77e42b23279d572860f132134c19d5e1e394c0ccf0c0022100891c0782247e5697b4d1f22f30595af00acaa51fd6f3e6848d42a4fddb2df921
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0029602eb8766ea321ffe092b12ada8bf92e6363445f3c6e26a7c6d7aa328514a1a22c7d522a0bb35a59e585aa50294ec6257f4eea83966b08999a63d107c7b5eb206d2f3aa82b677fcd3f0fb68d2adab4ab3ce0ce9f57137b55e5317121619be2fd23ad8d89d3c1effbae4594d456ed855e3b5ae86a8c1566615f9e2698c2bd8267870eedcb8f0936407c005cad7618d613ef770d8ee318d5bb832271bb4b7f97c3496893630135d1c8ff24285ffcfe2219efe9072268b463a7bebf71d91bc951b946582f63a9b6568a6ad473f921dd46ba8b34d482be19b924c4a787d8c4804a2618c060955449a5025670c71703b529a855d99945b11a0a28ea2c667812cdb6