*.gordonrlewis.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:67:25:31:d0:48:85:c7:35:81:50:68:1f:58:1b:03:78:d5 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.gordonrlewis.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:25:31:d0:48:85:c7:35:81:50:68:1f:58:1b:03:78:d5
Serial Number (int): 383547667602774786012864091617246484592853
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d3:12:14:d4:31:f7:22:95:a5:ae:d3:1c:31:e4:5a:b0:6c:da:b3:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:36:1a:b4:ac:1a:70:89:c5:78:41:0d:5a:82:68:93:c7:04:5f:c1
Fingerprint (sha256): 7e:64:81:b9:93:9d:67:02:13:b9:b0:a2:39:65:e6:a9:f5:d7:6b:0d:0c:09:75:f2:e9:88:c0:ff:4d:20:a1:c5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.gordonrlewis.net

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gordonrlewis.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.andiallstarr.com
*.anneliesebelmond.com
*.blueskies4children.org
*.bresalon.com
*.caelynnorth.com
*.catbirdplace.com
*.commsvens.com
*.darquetantraining.com
*.disneytoykids.com
*.escentiallife.com
*.freedomseekeryoga.com
*.gagnoncpa.com
*.gordonrlewis.net
*.gotreeclimbing.org
*.hedodiving.com
*.hlows.com
*.integralbreathwork.com
*.inwheeltime.com
*.jcsawi.org
*.jeeprosenberg.com
*.jeremygaylordphoto.com
*.jsrdrywall.com
*.metapathconsulting.com
*.mypcshomecare.net
*.naturallifenews.com
*.nekamo.com
*.outridermfg.com
*.rainbowsandclouds.com
*.riddletree.com
*.santareparata.org
*.silverpinepublishing.com
*.srisa.org
*.tamdf.com
*.thepicohouse.com
*.toallmydearfriends.com
*.viculi.com
*.vinea.church
andiallstarr.com
anneliesebelmond.com
blueskies4children.org
bresalon.com
caelynnorth.com
catbirdplace.com
commsvens.com
darquetantraining.com
disneytoykids.com
escentiallife.com
freedomseekeryoga.com
gagnoncpa.com
gordonrlewis.net
gotreeclimbing.org
hedodiving.com
hlows.com
integralbreathwork.com
inwheeltime.com
jcsawi.org
jeeprosenberg.com
jeremygaylordphoto.com
jsrdrywall.com
metapathconsulting.com
mypcshomecare.net
naturallifenews.com
nekamo.com
outridermfg.com
rainbowsandclouds.com
riddletree.com
santareparata.org
silverpinepublishing.com
srisa.org
tamdf.com
thepicohouse.com
toallmydearfriends.com
viculi.com
vinea.church

Other certificates including the domain name gordonrlewis.net

(limited to 100 certificates)
*.intelligene-healthinfo.com
customers.tigertech.net
web14.tigertech.info
*.titantransco.com
*.starlightparade.com
*.holmcorr.com
customers.tigertech.net
*.vaporsofmorphine.com
*.buckeyearcheryfestival.com
*.verese.net
customers.tigertech.net
*.gordonrlewis.net
customers.tigertech.net
*.cjsewingco.com
*.gordonrlewis.net
customers.tigertech.net
*.gordonrlewis.net
customers.tigertech.net
customers.tigertech.net
web14.tigertech.info
web14.tigertech.info
*.charterlawsac.com
*.mlevelconcierge.com
web14.tigertech.info
customers.tigertech.net
*.charterlawsac.com
customers.tigertech.net
web14.tigertech.info
*.vapemule.com
customers.tigertech.net
web14.tigertech.info
customers.tigertech.net
web14.tigertech.info
*.jackalopesports.com
*.gordonrlewis.net

Certificate

The complete raw certificate details for *.gordonrlewis.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCN90E1mXty09N/kLlPV
aiUXPxOYBpDIf1g7vaRu8OWHHS9psiHslcL1IH3K6BksddyIRdkFGgHhOpVz7Q2K
36ZJ08RNAHDhB1EgfEE3ocrtEUsQyvPLw9I3MBnFWtto6bKgD+1VpSz2y8w85cR7
aje2hBmgBzYIucQxoRqHFSGOSgH7Uv1eWr1LIDHU3VZ4ABNqIk5ae/p2MX3VE0Pb
JnlmGrZGt9P4VuZuTGsc9C7yomU/3gO528c7Nc9gPeg05Pqibb1uyAcyIicb30Fr
riKrWtKmqoMMtfRfxgKmc0Af7TAON8ZGaynNU8Ar79BAfESouVtbTugydJ9IAYab
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383547667602774786012864091617246484592853
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-08 08:39:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 08:39:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gordonrlewis.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21730489945225475147237775676369299776568159368139663381186447957947648001387043440994505622689379476781034145605174562412671258366001149654594648577663952920069494163582440725994536306413419343503358462467076842219814996174206571137409493387190466553258483727781663268480481690473802662122380057311135815954365569741876446387754820237591159602718713336865537533050194019554275099288642918480994886653857211258484345190307797220165154041637338034546721922889734745674574679110460776321320411850755404840620979348477137068669796049262830980304186507272568974533918345682992527001762287446993799557049102688908579609399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:19|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1420 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andiallstarr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anneliesebelmond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blueskies4children.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bresalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caelynnorth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catbirdplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commsvens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darquetantraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disneytoykids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escentiallife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedomseekeryoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gagnoncpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gordonrlewis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotreeclimbing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hedodiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hlows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integralbreathwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inwheeltime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcsawi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeeprosenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeremygaylordphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jsrdrywall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metapathconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypcshomecare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturallifenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nekamo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outridermfg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rainbowsandclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riddletree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santareparata.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silverpinepublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srisa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepicohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toallmydearfriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viculi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinea.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andiallstarr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anneliesebelmond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueskies4children.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bresalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caelynnorth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catbirdplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commsvens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darquetantraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disneytoykids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escentiallife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomseekeryoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gagnoncpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gordonrlewis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotreeclimbing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hedodiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integralbreathwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inwheeltime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcsawi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeeprosenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeremygaylordphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsrdrywall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapathconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypcshomecare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturallifenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nekamo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outridermfg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainbowsandclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riddletree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santareparata.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverpinepublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srisa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepicohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toallmydearfriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viculi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinea.church'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165b88d4be30000040300473045022077724c54d106f48b489ec7b04a2cbaa73ab89521f28989524069c5c1643256ac022100c1791829fc39d5e7096c9eb55fb737e0a3c4846b92bc3652552264fb9ba4e678007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165b88d4de200000403004630440220627628e7a3d7658b499b0f3487cb03f5349783ae7f95f85329ed8f2abe749ed70220645814c8cdcd0f19a51a64f74083ec4004c8a57c423421be63c2cb64f837e503
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00317941e4a638b8dcc7beb53fd3615fc8b8a289490a95b2caff05073e02860aa98af30d6c51ba0daf64e8cb6ea2d697b495df4cde51679801e3d324ca398c256d4a23cf2b2f1717ee60bd9b7f0776b2917fa360033742da6dd55718438f07f240ff98a85882217783677cf2f7bbf24f99e132dad7ec1e0ece7a0e1b4d5d84ab464521c84a6e44e9e3d4de435a744fda810cccfdb268d249e3523172e6ad799e46e9969a72155dd5c0fc7cff43471366e17cf2bd05eb77515a45446ce9aabe65476d88e3cb5f34cb9c998ef8c8da246bf4659f6cc45c219dc6d0cb2884afa9d3ba526894e5e838a356b025c9b338ffb7d8a1c33c11d05f6909c46de4ad9fea538a