tecklogic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:a7:d1:c5:9d:96:1b:82:b8:25:4d:0a:22:88:a6:f6:6a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tecklogic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:a7:d1:c5:9d:96:1b:82:b8:25:4d:0a:22:88:a6:f6:6a
Serial Number (int): 340505437194397947637017343457971656914538
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7f:41:54:b9:3e:63:2b:45:65:87:e3:5a:d0:d7:67:06:d8:be:5b:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 61:c2:e6:8d:59:ca:ea:7f:74:03:20:7c:90:6d:38:d5:41:4a:9f:39
Fingerprint (sha256): 8b:61:31:d7:ff:62:d0:70:1b:b8:b9:c9:02:13:99:0d:6c:f6:32:7b:cf:76:c2:b1:41:31:39:93:76:1f:83:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tecklogic.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tecklogic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquasantaterme.org
aiiob.com
alternativephysician.org
alzheimers-dementia.com
americanbirthinjuryalliance.org
andes.consulting
barbkops.ca
blueletterbible.bible
buystocks.website
cardspa.com
carrentalquebec.com
checkoff.me
clz4.com
cojac.com
elajolla.com
fiztab.com
fricska.com
gainesvillestemcellclinic.com
goodsleeplab.com
handilab.com
homeloan.mobi
infrastructure.world
irvineivfclinic.com
jointpainvirginia.com
keytouch.tech
louisianastemcellclinic.com
lpsab.com
minneapolisstemcellclinic.com
mission80-5.com
movieic.com
musclestemcell.org
mysecretnumber.co.uk
northdakotastemcellclinic.com
oregonstemcellclinic.com
org.insure
poorinamerica.com
r2136.com
reicore4.com
sincitystripclub.com
slimmingbra.com
sporthera.com
st-johns.college
stemcelllasvegas.org
stemcellmaryland.org
tecklogic.com
thebanlist.org
uave.tech
vacationschina.com
whitespace-tv.org
wodu.uk
www.acquasantaterme.org
www.aiiob.com
www.alternativephysician.org
www.alzheimers-dementia.com
www.americanbirthinjuryalliance.org
www.andes.consulting
www.barbkops.ca
www.blueletterbible.bible
www.buystocks.website
www.cardspa.com
www.carrentalquebec.com
www.checkoff.me
www.clz4.com
www.cojac.com
www.elajolla.com
www.fiztab.com
www.fricska.com
www.gainesvillestemcellclinic.com
www.goodsleeplab.com
www.handilab.com
www.homeloan.mobi
www.infrastructure.world
www.irvineivfclinic.com
www.jointpainvirginia.com
www.keytouch.tech
www.louisianastemcellclinic.com
www.lpsab.com
www.minneapolisstemcellclinic.com
www.mission80-5.com
www.movieic.com
www.musclestemcell.org
www.mysecretnumber.co.uk
www.northdakotastemcellclinic.com
www.oregonstemcellclinic.com
www.org.insure
www.poorinamerica.com
www.r2136.com
www.reicore4.com
www.sincitystripclub.com
www.slimmingbra.com
www.sporthera.com
www.st-johns.college
www.stemcelllasvegas.org
www.stemcellmaryland.org
www.tecklogic.com
www.thebanlist.org
www.uave.tech
www.vacationschina.com
www.whitespace-tv.org
www.wodu.uk

Other certificates including the domain name tecklogic.com

(limited to 100 certificates)
www.3wheelerinsurance.com
476.me
www.tecklogic.com
www.tecklogic.com
7849.org
www.louisianahousemoving.com
isolde.org
sipapi.org
tecklogic.com
zuccered.com
tecklogic.com
breathewithme.com
tecklogic.com
tecklogic.com
www.tecklogic.com
tecklogic.com
www.cardspa.com
xn--web-7k4bocn3015g390a.com
crimefightingcrowd.com

Certificate

The complete raw certificate details for tecklogic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LvgS7OYz/0P6jA71VIu
V3zItAlHT3s6S5Qnp1ycdW5F/aOveUM8P9pACruLeoHgH1m7EBtbUQLhvXcrYdDQ
qVi1ZXrKL1AuORzNcB4Ft6vmbI6ShzAhlR8G/8+YkBVjetIPtn8Cv56Q5E9yijv1
2MUtJEStMeiyDD6Nm80aq4Zk4j9sJ1rw/WYuhCiH7rf6LsX4c3ThLjVwAeTnzd6w
wflx1/CGQ9zxkZusUEi963wY3Wo140JUxiwq1XvYLLjHR1fEns4HjyBm6Lfd6X8b
v/GiARIVTZ6Zl1sEyvc5GhRuS51nCeoGJQkWNd5vGWsvkr+D3RkgQKjMrEErIq3q
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340505437194397947637017343457971656914538
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 11:37:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-02 11:37:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tecklogic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29884885157009875754029914903041495166982193545247111439771060736150939213000006289947189337263540172088115246341920862354010351291606816926826150896948620338549596982380653090505465223826211224483900331017887685913476267692840850328691752601060033877481429736671954587500438861702486081150978062399397213526746588447372804225964130766184621775909746454519287686932809159206535068074024259776214087012548683831825227270703899591335301319765120807176381618994898014165483333849160430050423723827638968317978511227584601873813660145171487552659514005794038557758276002150111815122929054435731650449072181672429031910093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f4154b93e632b456587e35ad0d76706d8be5b90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2038 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquasantaterme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiiob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternativephysician.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alzheimers-dementia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanbirthinjuryalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andes.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbkops.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueletterbible.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buystocks.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrentalquebec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkoff.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clz4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cojac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elajolla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiztab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fricska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainesvillestemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodsleeplab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handilab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeloan.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infrastructure.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irvineivfclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainvirginia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keytouch.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianastemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpsab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minneapolisstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mission80-5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musclestemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysecretnumber.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northdakotastemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oregonstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'org.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poorinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r2136.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reicore4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sincitystripclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slimmingbra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-johns.college'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcelllasvegas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellmaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecklogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebanlist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uave.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacationschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitespace-tv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wodu.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acquasantaterme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiiob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alternativephysician.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alzheimers-dementia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanbirthinjuryalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andes.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbkops.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blueletterbible.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buystocks.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrentalquebec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.checkoff.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clz4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cojac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elajolla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiztab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fricska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gainesvillestemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodsleeplab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handilab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeloan.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infrastructure.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irvineivfclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainvirginia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keytouch.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisianastemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpsab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minneapolisstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mission80-5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movieic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musclestemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysecretnumber.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northdakotastemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oregonstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.org.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poorinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.r2136.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reicore4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sincitystripclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slimmingbra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-johns.college'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcelllasvegas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellmaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecklogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebanlist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uave.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vacationschina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitespace-tv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wodu.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c5ca25253000004030046304402206bfa64b7616a236b5b751695191adadd61097ef5858a96c88125ed9f3e489df602202ac20b7600a76672b975adb6dbe2dd11760941b231ff19f29001966bccc3310f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c5ca252720000040300473045022100d6f0ac3e315a2c6df335eb21b8357aa6ee035339af1f6c5d1db4ca682bb60f600220298320df5765c556f21fa8e1145b2d385d72111ee1abdf1de5c3aad155748c59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0067a7eb155cabd74712b7f45fc91ad172e34fd6b85087ebcfbb00f9020dbf4ca598eb94ce1edc1dfa5328e1e4d6b9e2d86eec9d3feb5e0119deb15560021c430369256644ec2913b5f37daa018da9ad0f52dbf17c362eb88c1a1e8824416d77a741ec20a021e932559d86464e7f1868b4e998281438adc625d57a92b087ba75717d817d0438134afe70d666cfed8798f99ee9487b0e4196af76fda371a8ea7010759005f7903af8d50787514771fc92d5d448ee58d7abacd7508ab818651a3085b6f405c746efeb845eed4e844c6671c7b6655503c14e0819868c9b4ef4c28b15176d2cc194a5ab097c8cbef1618cc611c7ed6a9f54b0c358ebac6f0f3bc4efa9