www.freshstartreiki.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e1:1c:c3:30:bf:a8:62:38:aa:a1:e6:2a:b3:cb:31:ff:46 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.freshstartreiki.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:1c:c3:30:bf:a8:62:38:aa:a1:e6:2a:b3:cb:31:ff:46
Serial Number (int): 337938622223001638394444967851324924362566
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:59:ab:49:02:05:9d:57:03:33:31:b1:58:10:70:e7:3f:88:cf:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:f3:6b:17:11:16:44:31:c2:24:79:a6:d0:f1:8c:11:1b:c1:28:a6
Fingerprint (sha256): 7f:83:4b:59:f0:82:1e:8d:7f:40:f4:42:4f:cf:01:c6:55:8e:31:0d:d8:3b:ab:b6:69:de:38:d0:6c:f3:72:3d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.freshstartreiki.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.freshstartreiki.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

212leaf.com
4dwedding.com
562leaf.com
altoai.com
bffdf.com
bike-house.com
buy-weed-online.com
casting-couch.com
catastrofi.com
chiropracticsportsphysiciannetwork.com
christopherdeane.com
cipherite.com
clinical-trial.com
cocopineapple.com
comemai.com
easyservicedesk.com
freshstartreiki.com
geoestate.com
gmtcomposite.com
grid-link.com
hakavone.com
hiphop-clothing.com
indianme.com
jointpainknoxville.com
jointpainspokane.com
liesandtruth.com
mountainhempdistilling.com
musicbizmagazine.com
ninaconti.com
opelikadental.com
ottawa-dental.com
primacolazione.com
provosportsmedicine.com
qsilveronline.com
qualbook.com
rosh-hashanah.com
sammacreative.com
saytoomuch.com
sportsbookshark.com
srmcre.com
suggeriti.com
theyogaofclimate.com
tissuerestore.com
todayk.com
trendallocatefaith.com
victoriafallszimbabwe.com
www.212leaf.com
www.4dwedding.com
www.562leaf.com
www.altoai.com
www.bffdf.com
www.bike-house.com
www.buy-weed-online.com
www.casting-couch.com
www.catastrofi.com
www.chiropracticsportsphysiciannetwork.com
www.christopherdeane.com
www.cipherite.com
www.clinical-trial.com
www.cocopineapple.com
www.comemai.com
www.easyservicedesk.com
www.freshstartreiki.com
www.geoestate.com
www.gmtcomposite.com
www.grid-link.com
www.hakavone.com
www.hiphop-clothing.com
www.indianme.com
www.jointpainknoxville.com
www.jointpainspokane.com
www.liesandtruth.com
www.mountainhempdistilling.com
www.musicbizmagazine.com
www.ninaconti.com
www.opelikadental.com
www.ottawa-dental.com
www.primacolazione.com
www.provosportsmedicine.com
www.qsilveronline.com
www.qualbook.com
www.rosh-hashanah.com
www.sammacreative.com
www.saytoomuch.com
www.sportsbookshark.com
www.srmcre.com
www.suggeriti.com
www.theyogaofclimate.com
www.tissuerestore.com
www.todayk.com
www.trendallocatefaith.com
www.victoriafallszimbabwe.com
www.yogaofclimate.com
www.zhuifenghuwai.com
yogaofclimate.com
zhuifenghuwai.com

Other certificates including the domain name freshstartreiki.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.freshstartreiki.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vEAHNqWB/gKrxOMzyZR
EQ34vEnwoW3dcJWdF75fIuHDmEhtdQwha+YEY05j6JfgU+uhhYrxTsJwb7+wkyLa
X1dBeBIH+IXkszVYxHYURTbcFVXZTepUr+oJiT7dITd2VtyGA8JEPZAJedUg0kjV
9Baf4Zw2iSz6FljqAd7cPuc66gG92Pc8KhiPsxxGNv23Uc0FRROnpZjq9UQk2Id2
J/hEq6AEtMFk7Nf/FX1XvzdIOfrYdYR8Kxi35lEN4TgBmzKoTaTs6tGd1im65gM/
s4IudhnCT+r4V2oexhnQCrv76WDi6giYd/hIq0410+6g4dmkB8/cHDAOgELwhAme
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337938622223001638394444967851324924362566
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 03:45:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 03:45:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.freshstartreiki.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27638792228992847685348757166775255977620409200609607704372978370851594502390769156738252708522767359618324955478962935877706905117542745050860842295473303453440415477505886287931031825176425502118793338235880364794540749820235603087495491811418654640879406895933474609206572858307709125412126416850334484160132431899277747257171606911679138657999591254173898845392289485691014010124527714684941338001054665921486842901441848911803854181026093898542811245065350815282212674799999841993126284190682954588834994153062502313627345309290230331809729554806200301214173055493613720776828636775928092339209628536167520116317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d359ab4902059d57033331b1581070e73f88cf69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1982 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '212leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dwedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '562leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altoai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bffdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bike-house.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy-weed-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casting-couch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catastrofi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiropracticsportsphysiciannetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christopherdeane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cipherite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinical-trial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocopineapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comemai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyservicedesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshstartreiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmtcomposite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grid-link.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hakavone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiphop-clothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainknoxville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liesandtruth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainhempdistilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicbizmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninaconti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opelikadental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottawa-dental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primacolazione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provosportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qsilveronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosh-hashanah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sammacreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saytoomuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsbookshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srmcre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suggeriti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theyogaofclimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tissuerestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todayk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendallocatefaith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriafallszimbabwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.212leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4dwedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.562leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altoai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bffdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bike-house.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buy-weed-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casting-couch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catastrofi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiropracticsportsphysiciannetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christopherdeane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cipherite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clinical-trial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cocopineapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comemai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyservicedesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freshstartreiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geoestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmtcomposite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grid-link.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hakavone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiphop-clothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainknoxville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liesandtruth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainhempdistilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musicbizmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ninaconti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opelikadental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ottawa-dental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primacolazione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provosportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qsilveronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosh-hashanah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sammacreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saytoomuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsbookshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srmcre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suggeriti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theyogaofclimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tissuerestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.todayk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trendallocatefaith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriafallszimbabwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yogaofclimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zhuifenghuwai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogaofclimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhuifenghuwai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170329162520000040300473045022041a361f539208fc8fae00bfd1e7aa77fd05e714ac9e0f234746a6f786b64359a022100c9f3e643f75c9a9e568cbde922c660e55fd1e249e740f4003fdead026ce56f6000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001703291628b000004030046304402202ad38f23e68063900080adc0b1f043e4664f651d949362672e953410643cd40a02200d94c4eb5eb928af1fafc55355ace2df0d7e072d86e27b78bf071f2c60665696
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006f69d6071c4f3fe3e205c3128644fe09ecebdfc297d96008c6a319f8307214b1521f43a616d644e1d238b9f00259fd89a0a6862ec39c19ddf23106e4cf64400673e3bd991e9b69fe06c464ff3aaa302e3add52fe49bc2b89c620287cc18f6775cc93f11cfe68a40c4b03e1142513881766429f33d9b9e7a388bf9b38efd89c850f7cc150e61003be6d9905b79e8e1c079b4720e0677d91f990ef923bcd634fb68d4a17beb7a53965500e39479105942e6bc6def3a60b3e8e2717d5ec5c597ec92275907bd49b39e27512743670033b3620c7a945e1e62a4c5883b8fe7632a6fc75dc78fe89b93061feb15f01f93b24b1bd2ed5244daf005ed2e68bbd7841124a