aj.goprimer.co

Issued by R3

About this certificate

This digital certificate with serial number 04:74:81:79:42:46:ab:c5:0c:44:20:8d:95:86:51:8b:9d:bd was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aj.goprimer.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:74:81:79:42:46:ab:c5:0c:44:20:8d:95:86:51:8b:9d:bd
Serial Number (int): 388093998313484150579994483560646825450941
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2e:70:cf:72:2f:1b:16:95:c7:a5:39:76:0b:d2:7b:00:4c:ae:17:b5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 34:35:c3:2a:ca:28:b0:9d:af:b0:7c:4f:d4:bb:f7:0d:fc:73:92:6e
Fingerprint (sha256): 8e:da:e9:2a:58:89:1d:36:2e:9e:e1:e5:6b:1f:51:f2:86:42:8f:09:27:32:fd:6c:47:65:e5:0c:47:4d:3d:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aj.goprimer.co

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aj.goprimer.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aj.goprimer.co
ajtest.goprimer.com
apostrophe.goprimer.com
atolla.goprimer.com
billcom.goprimer.com
buy.kettleandfire.com
buy.letsbld.com
buy.nomnomnow.com
cuemath.goprimer.com
curalife.goprimer.com
cushion.goprimer.com
cutbackcoach.goprimer.com
diversyfund.goprimer.com
evernow.goprimer.com
felixforyou.goprimer.com
fiton.goprimer.com
forhims.goprimer.com
gainful.goprimer.com
get.fitonapp.com
get.forhims.com
get.metabolicrenewal.com
get.montikids.com
get.noom.com
get.tulipcremation.com
get.ubiome.com
go.gainful.com
hawthorne.goprimer.com
invest.diversyfund.com
katkin.goprimer.com
kettleandfire.goprimer.com
langehair.goprimer.com
lastbrand.goprimer.com
lifeprofitness.goprimer.com
liveclass.cuemath.com
metabolicrenewal.goprimer.com
mixbook.goprimer.com
modernfertility.goprimer.com
montikids.goprimer.com
mysteryscience.goprimer.com
nomnomnow.goprimer.com
otter.goprimer.com
papaandbarkley.goprimer.com
peachystudio.goprimer.com
picsart.goprimer.com
rocksbox.goprimer.com
sans.goprimer.com
secure.goprimer.com
sfox.goprimer.com
shop.lastbrand.com
signup.bill.com
start.bungalow.com
start.farmsteadapp.com
start.getsunday.com
subscribe.rocksbox.com
sunday.goprimer.com
supercoffee.goprimer.com
thefeed.goprimer.com
therapynotebooks.goprimer.com
triplebyte.goprimer.com
trufora.goprimer.com
try-app.go.insure
try.apostrophe.com
try.atolla.co
try.breathesans.com
try.curalife.com
try.cushion.ai
try.cutbackcoach.com
try.drinksupercoffee.com
try.evernow.co
try.felixforyou.ca
try.forhers.com
try.hawthorne.co
try.katkin.club
try.langehair.com
try.lifeprofitness.com
try.madison-reed.com
try.mixbook.com
try.modernfertility.com
try.mysteryscience.com
try.otter.ai
try.pbtopicals.com
try.peachystudio.com
try.picsart.com
try.sanebox.com
try.sfox.com
try.thefeed.com
try.therapynotebooks.com
try.triplebyte.com
try.trufora.com
try.upstep.com
try.wildfang.com
upstep.goprimer.com
wildfang.goprimer.com

Other certificates including the domain name goprimer.co

(limited to 100 certificates)
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
aj1.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
aj1.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
aj.goprimer.co
5000772504.goprimer.co
aj.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
aj.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
5000772504.goprimer.co
academia.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
academia.goprimer.com
aj.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
aj.goprimer.co
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
academia.goprimer.com
academia.goprimer.com
aj.goprimer.co
agirlnamedotis.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com

Certificate

The complete raw certificate details for aj.goprimer.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus/LXXvKO+flfraxHGJm
ABRwXqswY3d0D0Mp11HNyWK9kAPeaNLUS3cgD0yEADyVB0YUsA37KYaet/bXXbJT
RCHhK/cOVRBQruZB9EjMHSKBiSfTxTWiVwzyocRM6VWVbMQIa4R/zXvbToxaz3Bg
EnH3kKzbdyVaUcGTFy59OEh7/Jy7/8ljfk4mdr0GEaGjp9edqaukV2m5n6LDQXVg
Boa9fYDthFTh82IlnXNnvwgJybWcf2TG5D6RlXw0OI3E1OGtpFY2kjVohnPBYQgF
qwgBVQm4Oxg/4/Hcx60ysVlHRMVs+huGjZ1qDoek8wGxq7zjhMMjmhxYkU2PapVt
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388093998313484150579994483560646825450941
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-18 17:15:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-16 17:15:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aj.goprimer.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23582791958964131110377624854478448526089189877511260103838489332629702412921657986673720187146327266085350703476870944454116259020689460252374354622425394349235568639630342583103063560466508870098888155006190033969818465328854691418103028887613704051342367144525090192028547154728526815284565710500883571806803632542250735158173049783777060747311677186931098084200472196778475431511337553422403400162580145857684872391548972021428235874488201225477951721592979431629167567645750163707074822337032824833558897293460799144263927562422993440728875639015223842579245311323496003783960622237759749531225230056037889174853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e70cf722f1b1695c7a539760bd27b004cae17b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1998 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aj.goprimer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajtest.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apostrophe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atolla.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billcom.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.kettleandfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.letsbld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.nomnomnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuemath.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curalife.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cushion.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutbackcoach.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversyfund.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felixforyou.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiton.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forhims.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainful.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.fitonapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.forhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.metabolicrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.montikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.noom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.tulipcremation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.ubiome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gainful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawthorne.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.diversyfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katkin.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kettleandfire.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langehair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastbrand.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeprofitness.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveclass.cuemath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolicrenewal.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mixbook.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernfertility.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montikids.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysteryscience.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomnomnow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otter.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papaandbarkley.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachystudio.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picsart.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocksbox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sans.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lastbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.bill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.bungalow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.farmsteadapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.getsunday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.rocksbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunday.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercoffee.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefeed.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapynotebooks.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triplebyte.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trufora.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try-app.go.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.apostrophe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.atolla.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.breathesans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.curalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cushion.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cutbackcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.drinksupercoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.felixforyou.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.forhers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.hawthorne.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.katkin.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.langehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.lifeprofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.madison-reed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.mixbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.modernfertility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.mysteryscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.otter.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.pbtopicals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.peachystudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.sanebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.sfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.thefeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.therapynotebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.triplebyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.trufora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.upstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.wildfang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstep.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildfang.goprimer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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