assetalignment.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:de:e0:8a:ae:1c:69:49:bb:16:c5:d6:57:b9:f2:48:24:90 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assetalignment.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:e0:8a:ae:1c:69:49:bb:16:c5:d6:57:b9:f2:48:24:90
Serial Number (int): 337178010391141622437392796011405467198608
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:d3:73:46:f5:36:46:0d:52:dd:ef:0f:30:26:f7:de:00:02:57:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:d7:f7:e5:d7:96:c0:d1:fc:77:95:ab:62:e7:f8:16:75:2b:f2:37
Fingerprint (sha256): 84:b4:0e:99:ec:6e:88:19:08:cb:5f:03:c6:7f:60:74:ed:ed:f5:e3:2d:35:fa:d9:44:a9:47:e5:1e:3b:03:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate assetalignment.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assetalignment.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assetalignment.com
boat-shipping.com
callgramps.com
coloradostemcelltreatmentcenters.com
cottonbuilt.com
creditinsurers.com
demoquest.com
detectmasters.com
dressedtowin.com
dyna-sport.com
epicenterus.com
fiberopticattenuators.com
flexchest.com
gainsvillesportsdoctor.com
golfinsights.com
halloweendoordecorations.com
hawaiistemcelltreatments.com
heyshape.com
houstonpt.com
icareless.com
kidovr.com
lifbars.com
madeswiss.com
master-sports.com
masterfeet.com
memberpassport.com
mjlco.com
mountainhempspirits.com
mysticmtngrowers.com
namingagents.com
overheardinternet.com
paodds.com
poisonivydetectives.com
polypaint.com
presenceasspirit.com
qualogics.com
simosoft.com
sportsandentertainmentattorneys.com
sportsdoctorsdetroit.com
stimatchmakers.com
stopmasters.com
tastyblast.com
the-patent.com
theplanagers.com
thewashingtonpatriot.com
uppersport.com
vermontstemcelldoctors.com
vuimanagement.com
worldmint.com
wreathcraft.com
www.assetalignment.com
www.boat-shipping.com
www.callgramps.com
www.coloradostemcelltreatmentcenters.com
www.cottonbuilt.com
www.creditinsurers.com
www.demoquest.com
www.detectmasters.com
www.dressedtowin.com
www.dyna-sport.com
www.epicenterus.com
www.fiberopticattenuators.com
www.flexchest.com
www.gainsvillesportsdoctor.com
www.golfinsights.com
www.halloweendoordecorations.com
www.hawaiistemcelltreatments.com
www.heyshape.com
www.houstonpt.com
www.icareless.com
www.kidovr.com
www.lifbars.com
www.madeswiss.com
www.master-sports.com
www.masterfeet.com
www.memberpassport.com
www.mjlco.com
www.mountainhempspirits.com
www.mysticmtngrowers.com
www.namingagents.com
www.overheardinternet.com
www.paodds.com
www.poisonivydetectives.com
www.polypaint.com
www.presenceasspirit.com
www.qualogics.com
www.simosoft.com
www.sportsandentertainmentattorneys.com
www.sportsdoctorsdetroit.com
www.stimatchmakers.com
www.stopmasters.com
www.tastyblast.com
www.the-patent.com
www.theplanagers.com
www.thewashingtonpatriot.com
www.uppersport.com
www.vermontstemcelldoctors.com
www.vuimanagement.com
www.worldmint.com
www.wreathcraft.com

Other certificates including the domain name assetalignment.com

(limited to 100 certificates)
assetalignment.com
rltfunding.com
www.comprayvenda.com
assetalignment.com
www.knee-replacement.com
assetalignment.com
assetalignment.com
assetalignment.com
assetalignment.com
sni.cloudflaressl.com
camoqueens.com
mainestemcelltreatmentcenters.com

Certificate

The complete raw certificate details for assetalignment.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZEE68uMWJ5to0RzHuYt
Ja/UAU8tXsXiYKSG8L3XbXgRs+ThFTe5msCel/GY+qGYST/QonL/wlUysjvd4C5w
YGN2Ff5qFtdVWh+IGBFS8WUJ8/XGb5R81BvA7zgAmnR4NEaKWfnhjYAQy8ICb+iq
jVI3kUl/uiKgWaBHBD+QJs112l9oUR8goJkGFQKbNEq4n4n+QD/CuZPjAKnE1xFs
S3LMVqVBWHkLuupkrGBY59D8BqgrnduMlgXqp8+dXh7B4gjAXAqt7pWaMNtI+TCu
1OuPAjLk/NSvMgxFHEDTW301LRYQS93PZqF+gHlhFabEt3D96wbiZfOs/U35Bz0g
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337178010391141622437392796011405467198608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 21:11:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 21:11:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assetalignment.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23425598062831905540293266965334936291941132906159596089148786464982990390948336562538134814239163018469881175390335564927822973379486401966729885547162520588472693637202584818395065938577222905901852283976820643393258249620013808643724356359129219563376803102354495858765484530291068640795911816931111083814879756250784747123205162888033149761210320753562803565476531848090838412023059490562615927711097363614083461284782642913892699441355104311942738417149562319534103453277355658404562368853501408519287558586642430599544335134594667212059929702523286500621582069832259092507502892303311375510112428507305932038339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36d37346f536460d52ddef0f3026f7de0002573a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2154 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetalignment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boat-shipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callgramps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradostemcelltreatmentcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottonbuilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditinsurers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detectmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dressedtowin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyna-sport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicenterus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiberopticattenuators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexchest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainsvillesportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfinsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halloweendoordecorations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiistemcelltreatments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heyshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icareless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidovr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifbars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeswiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master-sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterfeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberpassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjlco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainhempspirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysticmtngrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namingagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overheardinternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paodds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivydetectives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polypaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presenceasspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualogics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsandentertainmentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsdoctorsdetroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stimatchmakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tastyblast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-patent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theplanagers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewashingtonpatriot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uppersport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vermontstemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vuimanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldmint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wreathcraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetalignment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boat-shipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callgramps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradostemcelltreatmentcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottonbuilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditinsurers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demoquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detectmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dressedtowin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dyna-sport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicenterus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiberopticattenuators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexchest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gainsvillesportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfinsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halloweendoordecorations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiistemcelltreatments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heyshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houstonpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icareless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidovr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifbars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madeswiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.master-sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterfeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memberpassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mjlco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainhempspirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysticmtngrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.namingagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overheardinternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paodds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivydetectives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polypaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.presenceasspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualogics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsandentertainmentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsdoctorsdetroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stimatchmakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tastyblast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-patent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theplanagers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thewashingtonpatriot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uppersport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontstemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vuimanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldmint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wreathcraft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016db2942403000004030047304502202fdc170b5b0b153f292867f408846cfa003e7f76646626767e17e72c14477320022100db33aa3478fe5db5f24753238499acd139bb9e9b485af024be6db427dacd84c2007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016db294240f0000040300473045022100bbdfb9f639111840223df832600002b5f9f67b90a86dbdef511e3b9691bce7d90220012e3c1368fa25df028eab4440ca8472ae8e650f994ee1053032db489b07567b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00290e10f859702409311bebf250752066533f23d18c624b12979e495860ab73989ead0130720855065c9e48ecbb04273d34dc14b74d5bf563911c2f5ba3b65c3737e617b85322df28a9a1937257d47e5eb4214d0fc24c3b69f29134b84bca829aab14ac30ed99046ca0e0b4487414d104f4debb2fd060bfa180aa35f554439dd8ff72918e7cca7a3c4e4122eea084dd364f0cd91b402ba28167298b4f29306474be984ebbf644860e7edd83adfef00efec579571aa7c5a9f556629a47c338097e95de9c41b88604b455ca584fb6073a67325d7441cabdb5e60ea3fcc1ebce109c343ade98b793ffcb7cefce80eef3611b3e04228e55e731cc8edcbc7543041960