lititz.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b4:4f:04:57:1d:0d:7d:55:df:99:ef:b7:ce:c9:b9:85:2a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lititz.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:4f:04:57:1d:0d:7d:55:df:99:ef:b7:ce:c9:b9:85:2a
Serial Number (int): 322692715388775532913539031972090710951210
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:fe:50:fb:6d:c7:82:8a:e4:8b:69:a4:fb:44:91:a1:55:62:e3:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:b0:ba:fa:77:12:8e:db:28:3d:55:be:1f:ef:83:d2:53:a6:96:d9
Fingerprint (sha256): 83:62:e1:1d:3f:43:cc:c5:3d:78:9d:5f:9b:a6:2a:2c:a3:06:69:a1:83:db:30:2a:d8:5a:39:87:53:14:a5:a1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lititz.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lititz.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

578008.com
almost.org
bestrefinancing.site
bztdod.nl
chiropractortampa.com
coconutcoir.org
columbusstemcell.org
dallasprp.org
devidurga.com
europe100.com
ewihtfgz.nl
firefighting365.com
fourseasonsspa.com
globalkhmer.bible
goldcoastkravmaga.com
greatbrand.org
greaterworksnow.org
housesittersaustralia.com
hta1.com
inboundbroker.org
innerjourney.life
jhatka.com
lectionarycompany.bible
lifewarriors.mobi
lititz.org
lzma2.com
metropoliscinema.com
motosdeprimera.com
newyorkprp.org
nouscorp.org
poisonivyremovalnorthcarolina.com
presenceofdignity.org
proddn.nl
protec-security.org
prptreatment.org
selfaid.org
slots2022.com
sophiatorba.com
sportsmedicineflorida.com
sportsmedicinelouisiana.com
stemcellflorida.com
stemdoctors.org
strategicbrands.co.uk
thcros.nl
tirestampa.com
usbsecuritycamera.com
vat321.com
viacha.com
whoomp.click
woodlandssports.org
www.578008.com
www.almost.org
www.bestrefinancing.site
www.bztdod.nl
www.chiropractortampa.com
www.coconutcoir.org
www.columbusstemcell.org
www.dallasprp.org
www.devidurga.com
www.europe100.com
www.ewihtfgz.nl
www.firefighting365.com
www.fourseasonsspa.com
www.globalkhmer.bible
www.goldcoastkravmaga.com
www.greatbrand.org
www.greaterworksnow.org
www.housesittersaustralia.com
www.hta1.com
www.inboundbroker.org
www.innerjourney.life
www.jhatka.com
www.lectionarycompany.bible
www.lifewarriors.mobi
www.lititz.org
www.lzma2.com
www.metropoliscinema.com
www.motosdeprimera.com
www.newyorkprp.org
www.nouscorp.org
www.poisonivyremovalnorthcarolina.com
www.presenceofdignity.org
www.proddn.nl
www.protec-security.org
www.prptreatment.org
www.selfaid.org
www.slots2022.com
www.sophiatorba.com
www.sportsmedicineflorida.com
www.sportsmedicinelouisiana.com
www.stemcellflorida.com
www.stemdoctors.org
www.strategicbrands.co.uk
www.thcros.nl
www.tirestampa.com
www.usbsecuritycamera.com
www.vat321.com
www.viacha.com
www.whoomp.click
www.woodlandssports.org

Other certificates including the domain name lititz.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for lititz.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxGiG7jnjNj/flE90g9I
271W3K5Ldfjdva2a/Gr4c5/ozbJzpQk17kjBxArxKXBuHf281kdjD/6jGEY3uD+A
VHLzdoD9e+y3f6xbmL6mGJZ3NKWpcPSj4Z1xh2JaL7z18fCoCb5cMV5bT3aelP3h
cEhRHf5oc14Wrcpfju2+Ce+WMWFpvsl640LzbCM29v4EZar7dC+h7b94oYbVFzG1
9xf5n1T4Q9jZ9aj1K+uz+7s+I1edI8CHU4K6PZ1bbPI+xIrhDZvqikh5dxnFFTNx
758ngv0QEiGGQU+YlSsVQqjaFXasye+pSzjNP2l0Rid8IfuwT2TtVvjYBOgXIl1T
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322692715388775532913539031972090710951210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 08:51:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 08:51:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lititz.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22605351861430965004730803137746703460673328313739608157729604978387615564879733414305064017353483388107724810267879088542161890070627605533761806660500168850268238961013551743903433470074871356445879293991939758259383802686176021420812673423182607494118021881205921603996467639632594187502155228578854822426743620403396415945722224631620578320087734133289844132229521606738827148240865201744368920610235496389515324288609429011085898301965929293320995982681638666174813708893380207670965089282651334821762219695675828484143740198516506625894550713778756635813534334461711200102767423242164826192910976127106706920213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03fe50fb6dc7828ae48b69a4fb4491a15562e34e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2008 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '578008.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almost.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestrefinancing.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bztdod.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiropractortampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coconutcoir.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusstemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasprp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devidurga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewihtfgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firefighting365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fourseasonsspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalkhmer.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcoastkravmaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatbrand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greaterworksnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housesittersaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hta1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundbroker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innerjourney.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhatka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lectionarycompany.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifewarriors.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lititz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lzma2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metropoliscinema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motosdeprimera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkprp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nouscorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyremovalnorthcarolina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presenceofdignity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proddn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protec-security.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prptreatment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfaid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slots2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophiatorba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicineflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinelouisiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemdoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategicbrands.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thcros.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tirestampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usbsecuritycamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vat321.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoomp.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodlandssports.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.578008.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.almost.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestrefinancing.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bztdod.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiropractortampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coconutcoir.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusstemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dallasprp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devidurga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europe100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ewihtfgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firefighting365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fourseasonsspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalkhmer.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldcoastkravmaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatbrand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterworksnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housesittersaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hta1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inboundbroker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innerjourney.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhatka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lectionarycompany.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifewarriors.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lititz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lzma2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metropoliscinema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motosdeprimera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorkprp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nouscorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivyremovalnorthcarolina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.presenceofdignity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proddn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protec-security.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prptreatment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selfaid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slots2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sophiatorba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicineflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinelouisiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemdoctors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strategicbrands.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thcros.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tirestampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usbsecuritycamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vat321.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whoomp.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodlandssports.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c236433dd0000040300463044022049a0ca1bf4257cedc5fb7928b90ca815248702e9d7f362642557dfaed5d96957022061a10fc473056d73e81159ccdac0e8af5aa5a092f64ab1cd284900293475aad3007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c236433d10000040300473045022100ef7c33a2e0aecf1ed71ebec664cb5f6aeb53b10dd9ed866ebed7c6f6a97017c302207528aefe5249c3ba1d442ad7f5cded68f75b0e5e7f86398a3d5f2fe583ce917e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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