www.genesanddna.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:46:03:43:09:77:79:d7:df:af:32:a0:13:95:13:ba:1a was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.genesanddna.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:46:03:43:09:77:79:d7:df:af:32:a0:13:95:13:ba:1a
Serial Number (int): 273680085900701517263057589411088763697690
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: db:13:8d:f0:ec:e4:c4:f0:9d:80:10:35:c6:3a:77:ad:35:34:b8:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2b:e1:e4:9e:91:5b:6d:4a:5f:19:12:99:99:53:17:fe:12:6b:89:b6
Fingerprint (sha256): 89:3d:21:2c:18:53:63:6c:a2:38:fb:ee:1a:8c:41:18:ef:42:a5:78:c6:4d:b0:57:b3:68:50:1b:e5:ce:af:d2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.genesanddna.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.genesanddna.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affocapital.com
affodigital.com
architectsworld.net
baliherbalist.org
blockchainacademi.com
blockchainag.net
blockchaingrowers.com
cartoonbusiness.com
cashinvestigation.net
countycricket.com
cricketheadlines.com
cryptoag.net
deutschelending.com
dominicaweather.com
dutch-dictionary.com
electricheater.org
environmentregulation.net
fijihistory.com
furgusonpolice.com
gabrielgarciamarquez.net
genesanddna.org
irishlending.com
kellyinvestigation.net
lagrandemanipulation.net
lapenthouse.com
lawsucre.com
liaisonofficer.com
liberiamoney.com
listentowhistleblowers.com
newoffshorelending.com
nigeriaassets.org
phaseconjugation.net
procurementbusiness.com
releasestrategy.com
romabudapest.com
sciencelending.com
selectedgroups.com
shanghailending.com
shaoxingtechnology.com
shipholding.com
sportovninoviny.com
sub-sea-crane.com
sumofnumbers.com
totalisolation.net
unnouveau.com
urologicalassociation.net
writtenbelow.com
www.affocapital.com
www.affodigital.com
www.antiguasale.com
www.architectsworld.net
www.athensattractions.com
www.auctioncalender.org
www.bitunemployed.com
www.blockchainacademi.com
www.blockchainag.net
www.blockchaincleaners.com
www.cartoonbusiness.com
www.cashinvestigation.net
www.caymancryptoexchange.com
www.cgieffects.com
www.cooptions.org
www.coralspringsweather.com
www.countycricket.com
www.cryptoag.net
www.dantedivinecomedy.com
www.deutschelending.com
www.dominicaweather.com
www.dutch-dictionary.com
www.environmentregulation.net
www.equitysector.com
www.fijihistory.com
www.furgusonpolice.com
www.gabrielgarciamarquez.net
www.genesanddna.org
www.irelandmoney.com
www.irishlending.com
www.kellyinvestigation.net
www.lagrandemanipulation.net
www.lapenthouse.com
www.lawcayenne.com
www.listentowhistleblowers.com
www.marineholdingtanks.com
www.motivationspeakers.org
www.newoffshorelending.com
www.phaseconjugation.net
www.procurementbusiness.com
www.releasestrategy.com
www.royalbitcoinexchange.com
www.santafenewspaper.com
www.sciencelending.com
www.selectedgroups.com
www.seychellessport.com
www.shaoxingtechnology.com
www.sumofnumbers.com
www.totalisolation.net
www.urologicalassociation.net
zaragozaweather.com

Other certificates including the domain name genesanddna.org

(limited to 100 certificates)
www.cashinvestigation.net
www.equitysector.com
www.affocapital.com
www.royalbitcoinexchange.com
www.motivationspeakers.org
3dperformances.com
selectedgroups.com
www.lapenthouse.com
shanghailending.com
selectedgroups.com
wildspeculation.net
3dperformances.com
www.malihello.com
www.globalsolarinstallation.net
www.lapenthouse.com
listentowhistleblowers.com
onboardnavigation.net
wildspeculation.net
www.genesanddna.org
shanghailending.com
environmentregulation.net
www.lapenthouse.com
www.phaseconjugation.net
www.procurementbusiness.com
www.cryptoag.net
www.shaleinvestigation.net
www.irelandmoney.com
www.financeaviation.net
3dperformances.com
deutschelending.com
www.lapenthouse.com
totalisolation.net
fijihistory.com
www.bitunemployed.com
www.stardustrevelation.net
www.dantedivinecomedy.com

Certificate

The complete raw certificate details for www.genesanddna.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHMtyYOq+UBk8k1syTAS
rIfpIfWn/ycCW3D9nDmmd4upMxZqxzb3DlZenuRqw3JTYTwGQOdIVS7l7yQu3OXu
66y8xdQwl5sk2uSlbXrAlLaP0Bzh2nQm2LPDdNGk58hNaVqrzHvgS5BOtGwGtaOc
vt1RYzAh8lfNmRra52f9543KdnWT0NVeI6VE248jdLbtFSC2rsdpbZZkkrnbycjS
ev+6l2LHnHSOUaFyriboY0X8NzYQJJJfjJvAO4ehbciu0c4xXbfM4y1/7JEIwR6N
MbtDPSWcssrMz1Qn5hF5jaziwYi8m9Z8iVFfzPBAQen8vazjQyg4xwhsIA3HcHy2
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273680085900701517263057589411088763697690
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 10:45:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 10:45:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.genesanddna.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25809411023872204740416831119633318291162487827674836014339290269116820467894684363678747087247768067562172273352495196720077067544839019364542789449775836054857814861073569747228564499079930900747975818961279004071901243727395052716437256586643742059236824461758653840551383985602383560264913342685035163209191081233367418930932917851272672673353897312669530349213573879930330738163572869348012328875643169111020575145770274378796999728768490973374346817586130044081909626623859722049876766133532754943078307165481490344900264303457061051894872544486013099163923903058914107330327576428856297226301827945392101963401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db138df0ece4c4f09d801035c63a77ad3534b830
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affocapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architectsworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baliherbalist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainacademi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchaingrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashinvestigation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countycricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketheadlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptoag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominicaweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dutch-dictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environmentregulation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fijihistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furgusonpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabrielgarciamarquez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesanddna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irishlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellyinvestigation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagrandemanipulation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawsucre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liaisonofficer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberiamoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listentowhistleblowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newoffshorelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriaassets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phaseconjugation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procurementbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releasestrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romabudapest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selectedgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanghailending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaoxingtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportovninoviny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub-sea-crane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumofnumbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalisolation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unnouveau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urologicalassociation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writtenbelow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affocapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antiguasale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.architectsworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athensattractions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auctioncalender.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitunemployed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainacademi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchaincleaners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartoonbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashinvestigation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caymancryptoexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgieffects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooptions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coralspringsweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countycricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptoag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dantedivinecomedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dominicaweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dutch-dictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.environmentregulation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equitysector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fijihistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.furgusonpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gabrielgarciamarquez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesanddna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irelandmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irishlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellyinvestigation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagrandemanipulation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawcayenne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listentowhistleblowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marineholdingtanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motivationspeakers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newoffshorelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phaseconjugation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.procurementbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.releasestrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalbitcoinexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santafenewspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sciencelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selectedgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seychellessport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaoxingtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumofnumbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totalisolation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urologicalassociation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaragozaweather.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b2c9c18630000040300473045022100d1ffd6a63bbc7bc029f7f6dbc5b447019cc81ad206674d56844fc29d2e845d5f022026664f0aa36efd4db7ba24a4f42674a3fd2a181468d837ee3b808a9c1d7a89d900750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b2c9c1885000004030046304402203d09bd98a1b9686140fdd3a70cabd8a88e9d8a7439008cdd75a2b9e2ddfe651e02205b561fb79d8f4a5b9cca33f4481a83f434546475243915e6887edac1d96b5ba1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003bf0ce0aaa771b2876b3e8c02c59c4d2486189cabc6321e9f92406f0854e623feb46a6876ae583c11e93a15936d128719d29aa44005e9ce43aa60399175279b76e16dc02e027ebd0da107e9f82ad914b03bfdac7dad2ad63c77dfe9951f97d0234bcac12b419a3c29c3de9489434f3e46e4f539e34c900e74068531168d26c68432de6f8d67d1bf8b490b896272a91366b64593a83817c452e034dfde1f0bc6f5c760df635eba71a43bf1dab95d1c3ec6dc2d690eb627e6495927d2858a2e8b420f3a35ba53afd37e1e14160e01cf283d5dabaf82af60bf5a951679aa3cda39cc597373343051e5a84e63635d546d17826191d8ae03da34cab62b5d87abf1b09