lists.familyfitnessandfreedom.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e9:be:79:c4:2d:b4:aa:83:6d:e2:1b:7b:50:7a:92:ba:ad was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lists.familyfitnessandfreedom.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e9:be:79:c4:2d:b4:aa:83:6d:e2:1b:7b:50:7a:92:ba:ad
Serial Number (int): 427988120785712128372140129069563024423597
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:3f:42:a9:5d:4a:1b:82:2d:2a:8a:1d:1f:e4:5f:74:7c:19:8d:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:b8:e7:e9:25:ac:bd:0d:49:aa:b3:03:32:04:c4:ff:7c:9c:1f:bc
Fingerprint (sha256): 8e:db:2f:e0:c0:73:f8:6b:15:77:2e:a8:31:8f:84:d2:18:7c:7f:f2:92:3a:eb:99:ff:65:71:28:80:4a:4e:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lists.familyfitnessandfreedom.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.familyfitnessandfreedom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.0100101110101101.org
lists.2empowerfm.com
lists.89ertheater.com
lists.89ertheatre.com
lists.8suh.com
lists.95246.org
lists.9pie.com
lists.a1tint.net
lists.aaompemail.org
lists.abuild.org
lists.acbldistrict22.com
lists.acheeseshopmystery.com
lists.adambader.com
lists.adammonaco.com
lists.adamreed.net
lists.adug.org.au
lists.aiswcd.org
lists.alanarts.com
lists.alandiashram.org
lists.albertaarts.org
lists.allen59.com
lists.allthingscupcake.com
lists.alpost455nj.org
lists.alteredmoods.org
lists.ameenahsstore.com
lists.amethysthealing.com
lists.amethysthealing.net
lists.ampmfineart.com
lists.amyjohnsoncrow.com
lists.andrew-projects.com
lists.anetool.com
lists.anneliesebelmond.com
lists.aomkalamazoo.com
lists.apragny.org
lists.arisacademy.com
lists.artisanbrewersworkshop.com
lists.artvigor.org
lists.aserl-lists.org
lists.ashbylumber.com
lists.ashbylumber2.com
lists.athenslandtrust.org
lists.atomzero.com
lists.aurasings.com
lists.autoauctionsoftware.com
lists.avedemexico.org.mx
lists.averyaames.com
lists.avlarts.com
lists.awebresource.com
lists.axelcdv.com
lists.ayenako.org
lists.bahaisofmoscow.org
lists.bahaisofthepalouse.org
lists.bamboo52nyc.com
lists.baobabstudios.net
lists.batutis.com
lists.beadogsbestfriend.com
lists.beardedbaby.net
lists.beautifulimageshairsalon.com
lists.bellinghamfoundry.com
lists.benjaminbarnes.com
lists.benschwab.com
lists.betagirl.com
lists.bethelgrovechurch.org
lists.bigteezesalon.com
lists.bikeathens.com
lists.bikeathens.org
lists.billcounts.com
lists.bitesizedproductions.com
lists.bitgems.com
lists.bitterpoet.com
lists.bjarv.com
lists.blackoutisland.org
lists.blogaliving.com
lists.bmc.me
lists.bmcelhaney.com
lists.boardgamers.org
lists.bowerydugout.com
lists.bowlhouston.com
lists.boylan.org
lists.bradyates.net
lists.brakemeyer.com
lists.breakawayracing.com
lists.brendanspiro.com
lists.brennenmcelhaney.com
lists.brokenwheelcampground.com
lists.brookdalecommons.org
lists.brookfieldfarm.com
lists.brownspath.com
lists.bruinslca.com
lists.bwajakarta.org
lists.celiet.com
lists.familyfitnessandfreedom.com
lists.familymealsproject.com
lists.moragataxpayers.org
lists.moragaweb.org
lists.ruinasdebonampak.edu.mx

Other certificates including the domain name familyfitnessandfreedom.com

(limited to 100 certificates)
lists.nikibikidress.com
*.flukemonkey.com
*.dvidebrand.com
*.dvidebrand.com
lists.familyfitnessandfreedom.com
*.hannahuhler.com
*.freetomato.com
lists.dottywood.org
lists.dottywood.org
*.mydogdoestherapy.com
lists.brookfieldfarm.com

Certificate

The complete raw certificate details for lists.familyfitnessandfreedom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJHfFjriTRH2Wzc15ArF
e+g7bSEDD/bmQBvIzG++QR3L7W19/+kSb71BMOgvVIDZpcgvwX7fIkGJdevfnILm
QZqdNnmG52g+y9JoOE3yYaUmQsgWWbRY8mzZHCjXDOorW6+uMV/40C7RiuuLH9Wq
1ZQRCn/wFcanFD+KSTjbjxcloawABd/nrOv24c5yLR0qH+gVAQDi6ZZHsA2SZfvd
DhSnX5jGvHlTvEUlcLGk8h6VQiSNuXZedq8v8bYCaThKuwvYLa9cpqrpH7R9GBjC
vTntyrCfTv8RGHS+NDN1HVq3WToRlQJEEj04XcUUNugdyOM2ccnOBYSXYW+4BngY
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427988120785712128372140129069563024423597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 06:26:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-04 06:26:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.familyfitnessandfreedom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24309686438010488905831354453442404266253605059115381720402950745326854352159658512865834392177191885777416207294811536058795049109676781332315435634097961109356562899704370526527265356736053481939492444483102811947639291157896260325185487831294983932533418278144399215027838112086112023846002213023540143383776794534732583565033936039111056502528780706075083134574018234281603861653727506487849962192664100617491512471482156036049416311210607075041825770927749499893510841889236960892889506989695162235820860163360336977422292748717561569929982020753085796187755007616523875133904311988743579157444378501769835583739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b3f42a95d4a1b822d2a8a1d1fe45f747c198d1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2270 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.0100101110101101.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.2empowerfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.89ertheater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.89ertheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.8suh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.95246.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.9pie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.a1tint.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.aaompemail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.abuild.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.acbldistrict22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.acheeseshopmystery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.adambader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.adammonaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.adamreed.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.adug.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.aiswcd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.alanarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.alandiashram.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.albertaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.allen59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.allthingscupcake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.alpost455nj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.alteredmoods.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ameenahsstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.amethysthealing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.amethysthealing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ampmfineart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.amyjohnsoncrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.andrew-projects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.anetool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.anneliesebelmond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.aomkalamazoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.apragny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.arisacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.artisanbrewersworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.artvigor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.aserl-lists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ashbylumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ashbylumber2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.athenslandtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.atomzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.aurasings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.autoauctionsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.avedemexico.org.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.averyaames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.avlarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.awebresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.axelcdv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ayenako.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bahaisofmoscow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bahaisofthepalouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bamboo52nyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.baobabstudios.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.batutis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.beadogsbestfriend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.beardedbaby.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.beautifulimageshairsalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bellinghamfoundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.benjaminbarnes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.benschwab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.betagirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bethelgrovechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bigteezesalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bikeathens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bikeathens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.billcounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bitesizedproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bitgems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bitterpoet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bjarv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.blackoutisland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.blogaliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bmc.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bmcelhaney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.boardgamers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bowerydugout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bowlhouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.boylan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bradyates.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.brakemeyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.breakawayracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.brendanspiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.brennenmcelhaney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.brokenwheelcampground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.brookdalecommons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.brookfieldfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.brownspath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bruinslca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bwajakarta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.celiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.familyfitnessandfreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.familymealsproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.moragataxpayers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.moragaweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ruinasdebonampak.edu.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001650e20fef500000403004830460221009a3a2b91293f3b815b807303da92f143f3f5a970563a84295284d37b5f2cf2cd0221009daebb0b79c6f20b7fa85bedb9ff33c40499841108d1436617bfe4ebff90391f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001650e20ff290000040300473045022100fed43da622c343f429f95c3a623300306a3db547aad9a0e857b7d194b960ff690220151f2ba69ab62d5a55bca08ba327c44c8f4c7e2f1834e82cfbbf31c2629b755b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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