*.theregenfund.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a0:5f:88:65:3f:b9:2e:ec:42:3c:41:ef:09:33:96:bb:a4 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.theregenfund.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a0:5f:88:65:3f:b9:2e:ec:42:3c:41:ef:09:33:96:bb:a4
Serial Number (int): 403021307299935524145441211295602400738212
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:0c:1c:0d:2a:33:7a:a1:1b:85:0e:2f:57:cc:8d:26:94:f3:4e:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0f:b7:38:38:21:ec:f4:2c:78:3f:b8:1d:c2:e0:4a:37:0e:9f:12:68
Fingerprint (sha256): 8f:fa:fc:60:62:a1:8b:af:8c:19:43:ab:45:5a:3e:97:8d:99:96:57:38:c2:e1:f1:02:fd:d3:33:35:1a:33:a6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.theregenfund.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.theregenfund.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3celestialfires.com
*.acmemerchantsolutions.com
*.all-about-travel.net
*.andythedrummer.com
*.ashcreekph.com
*.astrology.richardbrown.com
*.atironwork.com
*.atironworks.net
*.awstartt.com
*.brakemeyer.com
*.carstenspencer.com
*.clehelpdesk.net
*.detodoaya.com
*.downeycubscouts.com
*.ducks.richardbrown.com
*.elenaberg.com
*.files.oldwaysways.com
*.flyingcolorsapparel.com
*.jfmco.com
*.kmcappraisal.com
*.lampstone.com
*.luckywolrd.com
*.martybermanassociates.com
*.museum-ed.org
*.neramta.org
*.oldwaysways.com
*.orsogril.info
*.orsogril.net
*.orsogril.org
*.orsogrill.com
*.orsogrille.com
*.orsogrilsterope.com
*.performance-mktg.com
*.personality-testing.info
*.rcoshow.com
*.richardbrown.com
*.spiritofgoldfinch.com
*.theattachmentcenter.com
*.thebigw.club
*.thedemolitionstore.com
*.thegreenduck.richardbrown.com
*.themetaldoctor.com
*.theregenfund.com
*.xip1.com
3celestialfires.com
acmemerchantsolutions.com
all-about-travel.net
andythedrummer.com
ashcreekph.com
atironwork.com
atironworks.net
awstartt.com
brakemeyer.com
carstenspencer.com
clehelpdesk.net
detodoaya.com
downeycubscouts.com
elenaberg.com
flyingcolorsapparel.com
jfmco.com
kmcappraisal.com
lampstone.com
luckywolrd.com
martybermanassociates.com
museum-ed.org
neramta.org
oldwaysways.com
orsogril.info
orsogril.net
orsogril.org
orsogrill.com
orsogrille.com
orsogrilsterope.com
performance-mktg.com
personality-testing.info
rcoshow.com
richardbrown.com
spiritofgoldfinch.com
theattachmentcenter.com
thebigw.club
thedemolitionstore.com
themetaldoctor.com
theregenfund.com
xip1.com

Other certificates including the domain name theregenfund.com

(limited to 100 certificates)
customers.tigertech.net
*.theregenfund.com
*.theregenfund.com
customers.tigertech.net
*.rentaspc.com.mx
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
theregenfund.com
customers.tigertech.net

Certificate

The complete raw certificate details for *.theregenfund.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q+eUrtPJCh5wpZTib6n
rVcHF5EQmiKvc99WHgmxM9aFYvnkDlfbbYuT1yLO8c9emdWdwNMz2oPaE4EhUyuQ
81MwlBZ6iTOfVKkgtjs4ODlvVmiegGI/yhGffMjz+OfCym7Rz+aiDT+97C8MaaWU
vp63UhULwN8+JIUSBYY2BserGpnKdNuXtOSbANj04f+FnKibMHDpDiLikaadiNHK
ClOBQnYO/i0ll+2X65MLvHlL6bqvHn/cAPc0K4RRHYUdLa1gzARN/15Q1Dpl5fpM
K6O2FBHaZfuzSMj9tHD9WfGl8DcsWRqtLCexDcD03jyk6hx9RcSFbeUYtliEpR/t
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403021307299935524145441211295602400738212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-23 08:33:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-21 08:33:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.theregenfund.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27606551167890912989574240904648063587295768471418549809380196524764230052673036521140310785779465707415087745497467758770241211944065783604558357837975300163355590724765590280646654160183648927844699025661657957633472640833990660504657218865781370550094488825813307980010816826713775308624209316190156445853065297481967469204668961369229088167200999122000068255630707727894362957963989084424110793150118697928144433300279911180717806274731201580370103727826010586524404611006476970374021312856148753826545540555209310176276389788013407758839634439998767988916493043831378444489771899872472604829499604744485617003903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff0c1c0d2a337aa11b850e2f57cc8d2694f34e0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1642 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3celestialfires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acmemerchantsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.all-about-travel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andythedrummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashcreekph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrology.richardbrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atironwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atironworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awstartt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brakemeyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carstenspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clehelpdesk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.detodoaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downeycubscouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ducks.richardbrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elenaberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.files.oldwaysways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyingcolorsapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jfmco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kmcappraisal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lampstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luckywolrd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martybermanassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.museum-ed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neramta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oldwaysways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orsogril.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orsogril.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orsogril.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orsogrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orsogrille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orsogrilsterope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.performance-mktg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personality-testing.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcoshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.richardbrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiritofgoldfinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theattachmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebigw.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedemolitionstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegreenduck.richardbrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themetaldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theregenfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xip1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3celestialfires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acmemerchantsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'all-about-travel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andythedrummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashcreekph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atironwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atironworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awstartt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brakemeyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carstenspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clehelpdesk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detodoaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downeycubscouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elenaberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingcolorsapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfmco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmcappraisal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lampstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckywolrd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martybermanassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museum-ed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neramta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldwaysways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orsogril.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orsogril.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orsogril.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orsogrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orsogrille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orsogrilsterope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance-mktg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personality-testing.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcoshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richardbrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritofgoldfinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theattachmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebigw.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedemolitionstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themetaldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theregenfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xip1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017554ce29b60000040300473045022100fbe43c98fd583da6af5d1e08b88f8470b84fcaa90e13f08a12f62b7eb6734d9302201b88e55fb09d2511dfc92e125ad596d8c988fa0efe7ed00a67d6870e384eca6c007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017554ce29b60000040300473045022100ac82f84d6e46320e507d40bd75be590ebc99d2a5dd90be5e429a8bd467b2b3c7022045d2ff09ec28f31f0b7427979e4e388cd4ac753c0ec71bd378fabff5aa65cb95
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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